5 ms·
How is it worse than: $ ./configure && make I guarantee you that it'd be easier to hide something nefarious in 3000 lines of autoconf boilerplate.
by bodyfour 13y ago
How is it worse than:
$ ./configure && make
I guarantee you that it'd be easier to hide something nefarious in 3000 lines of autoconf boilerplate.
- IgorPartola 13y agoIt's not. And at least the download here is over HTTPS, not HTTP. But you are right, both are vulnerable unless the user is ready to be cautious.
- andreasvc 13y agoWell if it's not, then how exactly is it "evil"? Do you audit install scripts and source code before using software?
- IgorPartola 13y agoWell, technically, I trust the Debian developers to do that for me. And I verified that they have approved of the software automatically, by checking their signatures on the Release file, which contains the hashes of the packages.
- michaelhoffman 13y agoSo you only install signed Debian packages then?
- IgorPartola 13y agoIf I have the option to, yes. Or rather I take much less care to actually read the code when I am installing a package out of the Debian repo's. Otherwise, I at least try to review what the heck that I am installing, especially on my own machine.