Thread

1. computator · 1789670801 · focus · HN ↗

   I'd like to use it, but I'm hesitant to use anything that isn't a reviewed and approved package in my Linux distribution. Even if the chance is 1% that a program I download has malware or security problems that even the author doesn't know about (eg., due to libraries used), odds are that my system's going to be compromised if I run 50 such programs. This extends to browser add-ons, bookmarklets, and extensions too.

   How do other people handle this dilemma?

   Even solution I can think of involves are a great amount of extra work.

   1. BrokenCogs · 1789670970 · focus · HN ↗

      Clone the repo and ask your llm of choice to audit any security risks

      1. edoceo · 1789671456 · focus · HN ↗

         After that I run them in containers, no network access, ro filesystem.

         1. perlgeek · 1789740893 · focus · HN ↗

            Not very practical for a solution that requires a browser plugin. The browser is where most of my interesting data is.

Unofficial Hacker News client; not affiliated with Y Combinator.