Thread

1. computator · 1789670801 · focus · HN ↗

   I'd like to use it, but I'm hesitant to use anything that isn't a reviewed and approved package in my Linux distribution. Even if the chance is 1% that a program I download has malware or security problems that even the author doesn't know about (eg., due to libraries used), odds are that my system's going to be compromised if I run 50 such programs. This extends to browser add-ons, bookmarklets, and extensions too.

   How do other people handle this dilemma?

   Even solution I can think of involves are a great amount of extra work.

   1. Zephyrix · 1789678954 · focus · HN ↗

      Distro maintainers aren’t infallible either. At the end of the day it’s up to you to decide where and how much trust you place and do your due diligence from there.

      One thing that can be helpful when reasoning about things like this is figuring out what your actual threat model is. What does system compromise look like to you? Data exfiltration, arbitrary code execution, something else?

Unofficial Hacker News client; not affiliated with Y Combinator.