you are viewing a single comment's thread
view the rest of the comments
[–] 30 points 3 weeks ago (1 child)

Nor are Linux users conditioned to download programs from random sketchy sources the way Windows users do.

I think about this every time install instructions for something are "run this terminal command to add our repo to your sources". Would probably be pretty easy to get an auto-updating attack path for the unsuspecting. The first drop doesn't even need to be malicious, just ship the virus as an update.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 12 points 3 weeks ago

    Yeah, if you're doing some sort of curl | sh nonsense you'd better trust whoever is supplying that script implicitly. On the bright side, I've only ever seen that on the first-party website of the project being installed, so it could be worse.

  • source
  • parent