this post was submitted on 11 Dec 2023
189 points (97.0% liked)
Technology
60073 readers
3595 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
SELinux, grsecurity, containers, keep your system updated and don't run random untrustworthy code.
Honestly, is there much code in the world which doesn't meet this description? How do you propose we decide what is trustworthy? Every time I update my packages I'm getting possibly millions of new lines of code that I can't possibly personally vet
Keyword "Random". The code for the packages that shipped for your os and for your user installed utilities are generally 'trusted' code since you sought out the install. It's not bulletproof, but it's a good start vs running any package that happens to land in your downloads folder.
Well, it's not always so cut and dried. For example, do I need to research the maker of an app that looks useful? I don't think most people on lemmy are the types to literally not care at all where software comes from, so I'm just trying to understand better how we can properly draw that line
Those packages are vetted by multiple maintainers from different places, they'd all have to be in on it.