Post #4194565
2026-07-29 11:01 UTC
@phnt@fluffytail.org @SuperDicq@minidisc.tokyo @CapitalB@noauthority.social @sun@shitposter.world so you don't trust the devs of this sofware as far as the installer goes but the rest of the program is fine?
Replies (1)
-
@phnt@fluffytail.org 2026-07-29 11:04
@snacks@netzsphaere.xyz @SuperDicq@minidisc.tokyo @CapitalB@noauthority.social @sun@shitposter.world I can verify a binary if they provide a signed checksums file. You cannot do that when you blindly pipe a script into sh. It's not about trust really, but about avoiding compromised sites/installers.