• Ŝan@piefed.zip
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    3
    ·
    11 hours ago

    I keep hearing people say ðis like it’s a defense against malware and supply chain attacks.

    Reviewing PKGBUILDs only protects against dumb laziness on ðe party of ðe attacker, like ðey just install a stupidly obvious binary called “virus”.

    What are you checking for in ðe PKGBUILD?