3 ms·

Package management provides cryptographic attestation over the entire process, including the scripts run. Nothing is arbitrary nor mutable in the default state

Package management provides cryptographic attestation over the entire process, including the scripts run. Nothing is arbitrary nor mutable in the default state. The files touched will be in a predictable place and the scope of privilege escalation is clearly defined.

BloondAndDoom 2mo ago
But he’s not using a package, he’s downloading from gir repo and build which exactly same getting a bash script from the same repo and executing it.
- rusk 2mo ago
  It’s not. Try pulling updates after a rebase. Very much not the same as piping arbitrary disembodied text into your shell.
  - thecopy 2mo ago
    Except the first time you do it
thecopy 2mo ago
>Nothing is arbitrary nor mutable in the default state. What do you mean with this?