Comment on "So that a truncated partial download doesn't end up executing half a script"parentComments−Hamuko2yDidn't the xz situation kinda prove that even reading the script is probably not gonna do you a lot of good if you're up against someone smart?−xandrius2yExactly, also if you already go thinking in adversarial terms when using something, why would you even use the thing to begin with?Maybe I'm too naïve.−samtheprogram2ygiven the xz situation a well crafted shell script can seem harmless while being very dangerousThat’s exactly what they are saying.−wizzwizz42yThe xz situation proved the opposite: if you're up against someone smart, you won't read the script (and you'll think you have).−ta12432yThe xz situation proved that while you didn't read the script, someone did detect the problem. It shows the benefit of many-eyes.
Comments
Didn't the xz situation kinda prove that even reading the script is probably not gonna do you a lot of good if you're up against someone smart?
Exactly, also if you already go thinking in adversarial terms when using something, why would you even use the thing to begin with?
Maybe I'm too naïve.
That’s exactly what they are saying.
The xz situation proved the opposite: if you're up against someone smart, you won't read the script (and you'll think you have).
The xz situation proved that while you didn't read the script, someone did detect the problem. It shows the benefit of many-eyes.