3 ms·
Not that there aren't trust issues with bigger projects but don't folks worry that the further down the "branch of a flavour of of a branch of a flavour" chain
by AlecSchueler 10mo ago
Not that there aren't trust issues with bigger projects but don't folks worry that the further down the "branch of a flavour of of a branch of a flavour" chain they go the higher and higher the risk of someone sneaking nefarious code through becomes? I guess there's a natural barrier in that the lesser known code bases become less of a target.
Sometimes I just find it wild with how much we talk about containers and sandboxes for the user space code we run that there's still regular recommendations for the random distro of the week published by who knows who.
- deleted 10mo ago[deleted]
- deleted 10mo ago[deleted]
- w4yai 10mo agoWe don't talk about that here. We're here to spit on Microsoft.
- wongogue 10mo agoUniversal blue images are built via public GitHub Actions runners. If you don’t trust them, fork it and use your own image.
- AlecSchueler 10mo agoHow would that solve the problem of running the unaudited changeset between Fedora and Blue Fin and then between that and Universal Blue?
- deleted 10mo ago[deleted]