4 ms·
Great, thank you for this software! Any idea if there are trusted 3rd party hashes for popular install scripts? If a website wants you to: curl "http://sketch
by wyc 12y ago
Great, thank you for this software! Any idea if there are trusted 3rd party hashes for popular install scripts?
If a website wants you to:
curl "http://sketchyurl.com/script.sh" http://sketchyurl.com/script.sh" | hashpipe PRECOMPUTEDHASH | sh
it might be even worse, giving you only the facade of additional security.
- _prometheus 12y agoThat's a bigger problem, because we essentially need full PKI. My preferred solution is via http://ipfs.io http://ipfs.io -- but i may be a bit biased :) I think we can get halfway there with a "signed hash" construction, but yeah-- PKI...