Zerush@lemmy.ml to Open Source@lemmy.ml · 2 年前Over 100,000 Infected Repos Found on GitHubapiiro.comexternal-linkmessage-square25fedilinkarrow-up1207cross-posted to: hackernews@lemmy.smeargle.fans
arrow-up1207external-linkOver 100,000 Infected Repos Found on GitHubapiiro.comZerush@lemmy.ml to Open Source@lemmy.ml · 2 年前message-square25fedilinkcross-posted to: hackernews@lemmy.smeargle.fans
minus-squaredelirious_owl@discuss.onlinelinkfedilinkarrow-up19·2 年前Friends dont let friends install software that isn’t signed. Use apt.
minus-squarePantherina@feddit.delinkfedilinkarrow-up11·edit-22 年前Lol apt Or to frame it differently, use a package manager and not appimages etc.
minus-squaredelirious_owl@discuss.onlinelinkfedilinkarrow-up4·2 年前AppImages actually do have (optional) support for signatures.
minus-squarePantherina@feddit.delinkfedilinkarrow-up2·2 年前They have no update feature afaik, how does this work? What verified this signature, the user?
minus-squaredelirious_owl@discuss.onlinelinkfedilinkarrow-up2·2 年前Its a subcommand of the AppImage. The developer adds the signature to the AppImage and the user verifies it after download with the subcommand.
minus-squarePantherina@feddit.delinkfedilinkarrow-up1·2 年前Thats nice, didnt even know there was an interface for managing appimages?
minus-squareandreas@lemmy.korfmann.xyzlinkfedilinkarrow-up3·2 年前I mean, yeah but not everything is available over apt. I try to use it whenever I can though
Friends dont let friends install software that isn’t signed.
Use apt.
Lol apt
Or to frame it differently, use a package manager and not appimages etc.
AppImages actually do have (optional) support for signatures.
They have no update feature afaik, how does this work? What verified this signature, the user?
Its a subcommand of the AppImage. The developer adds the signature to the AppImage and the user verifies it after download with the subcommand.
Thats nice, didnt even know there was an interface for managing appimages?
I mean, yeah but not everything is available over apt. I try to use it whenever I can though