Post #4194751
2026-07-29 11:04 UTC
@snacks@netzsphaere.xyz @SuperDicq@minidisc.tokyo @CapitalB@noauthority.social @sun@shitposter.world I can verify a binary if they provide a signed checksums file. You cannot do that when you blindly pipe a script into sh. It's not about trust really, but about avoiding compromised sites/installers.
Replies (1)
-
@snacks@netzsphaere.xyz 2026-07-29 11:05
@phnt@fluffytail.org @SuperDicq@minidisc.tokyo @CapitalB@noauthority.social @sun@shitposter.world you can only verify that it's the same binary/a reproducible build of another binary