diff options
| author | Joey Hess <joeyh@joeyh.name> | 2016-04-05 13:19:05 -0400 |
|---|---|---|
| committer | Joey Hess <joeyh@joeyh.name> | 2016-04-05 13:19:05 -0400 |
| commit | f093568d9156e551071a0ad2583a03307b717aa2 (patch) | |
| tree | 9b0a6e9359315fc651e21c37c232bff7299904f8 | |
| parent | 544492d4064d723be10d07e1469f380ea37d76fd (diff) | |
| parent | 320fd857a7b8dd1ec1173740819b074f21b077b0 (diff) | |
Merge remote-tracking branch 'origin/master' into joeyconfig
| -rw-r--r-- | doc/forum/concurrent-output_dependency_implies_compilation_of_a_lot_of_unstrusted_sources_as_root.mdwn | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/doc/forum/concurrent-output_dependency_implies_compilation_of_a_lot_of_unstrusted_sources_as_root.mdwn b/doc/forum/concurrent-output_dependency_implies_compilation_of_a_lot_of_unstrusted_sources_as_root.mdwn new file mode 100644 index 00000000..c40b29ef --- /dev/null +++ b/doc/forum/concurrent-output_dependency_implies_compilation_of_a_lot_of_unstrusted_sources_as_root.mdwn @@ -0,0 +1,3 @@ +The recent dependency on concurrent-output adding implies downloading, compiling, and executing as root of many (MissingH, hslogger, process, unix-compat, network, directory, ansi-terminal, unix, ...) unstrusted sources. This seems like a huge security problem... + +Are these at least downloaded using https? |