[Slackbuilds-users] Corcern about sources' procedence

David Woodfall dave at dawoodfall.net
Thu Jun 9 11:20:32 UTC 2011


On (08:04 09/06/11), Niels Horn <niels.horn at gmail.com> put forth the proposition:
>On Thu, Jun 9, 2011 at 8:00 AM, Rob McGee <rob0 at slackbuilds.org> wrote:
>> On Thu, Jun 09, 2011 at 11:19:25AM +0200, Hac Er wrote:
>>> I have discovered this piece of wisdom in the SlackBuilds site:
>>>
>>> "If you don't trust us to check the scripts for malicious
>>> activity, then please move along."
>>
>> Wise words indeed.
>>
>>> I trust SlackBuild's statement of them checking the scripts for
>>> evil contents. In fact, many scripts are so simple that you can
>>> check them quickly in a few minutes. However... what happens if
>>> Niels Horn is one of those Black Hats who live in the shadows,
>>> slowly infecting computers all around the world as part of his
>>> plan for conquering the Earth?
>>
>> It's not Niels. It's Michiel. We have suspected it all along, and
>> have known it for quite some time. I'm afraid is is too late now.
>> Relax and cooperate with him; he might not hurt you.
>> --
>>    Rob McGee - /dev/rob0 - rob0 at slackbuilds.org
>> _______________________________________________
>
>To all:
>
>Please check my picture on my site: http://www.nielshorn.net/other/personal.php
>That's a *brown* hat, not a black hat!
>
>--
>Niels Horn

I understand the OP's point, but then someone could hack the server of
whoever provides the source and we have the same problem. I doubt
there is any realistic way of checking source, apart being vigilant
and watchful when using software.

Nice hat by the way Niels ;)

D.


More information about the SlackBuilds-users mailing list