4 ms·
ALWAYS COMPILE FROM SOURCE - NO EXCEPTIONS. And still you can have problems if the source package has been compromised: https://news.ycombinator.com/item?id=616
by Ecio78 13y ago
ALWAYS COMPILE FROM SOURCE - NO EXCEPTIONS.
And still you can have problems if the source package has been compromised:
https://news.ycombinator.com/item?id=6167000 https://news.ycombinator.com/item?id=6167000 [ok it's javascript]
http://www.exploit-db.com/exploits/15662/ http://www.exploit-db.com/exploits/15662/ [source code -ProFTPD]
http://www.cert.org/advisories/CA-2002-28.html http://www.cert.org/advisories/CA-2002-28.html [source code - Sendmail]
etc..
or do you want to tell us that you inspect every line of the source code before compiling something?
- at-fates-hands 13y agoI think he told me this so I would get into the habit of doing it. I was so used to just clicking on an executable file and just installing the program without ever thinking it may contain malicious code. I can tell you I don't do this every time. Now if I'm installing a 3rd party extension or plugin, I usually do it in a sandboxed environment, run some pen tests on it to check how secure it is and see if there's any malicious code before I install it on my machine or server. And yes, even then, it is still possible to install malware on your machine.