Dumhuvud comments on crates.io: Malicious crates evm-units and uniswap-utils

crates.io: Malicious crates evm-units and uniswap-utils (blog.rust-lang.org)

submitted 11 months ago by nemeski@mander.xyz to c/rust@programming.dev

7 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] Dumhuvud@programming.dev 13 points 11 months ago (2 children)

If you use Linux, this is a good reminder to spend a bit of time learning AppArmor / SELinux. rustc / cargo and processes spawned by them shouldn't have access to your entire $HOME.

hideshow 2 child comments

[–] vas@lemmy.ml 2 points 11 months ago

Or bubblewrap. Though that requires more effort than "a bit of time" to do comprehensive isilation..

parent

[–] soc@programming.dev 1 point 11 months ago

Sadly, the developers of these apps can't even be bothered to not dump random folders into $HOME. 🤷

parent