On 05/17/2010 03:00 PM, Rahul Sundaram wrote:
On 05/17/2010 06:24 PM, Ralf Corsepius wrote:
>
>> downloads and verifies them.
>>
> Can you explain how? Autodownloader has a hash of the files that it
> $HOME == automated arbitrary access to arbitrary user data == arbirary
> option to install maliculous programs (viruses, spyware etc.).
It is not arbitrary and the user is prompted to download the data. The
data is verified against a hash.
You mean the forged hash, referring to the
self-modifiying data inside.
Did you even try out autodownloader
and understand how it works? Doesn't seem like it at all.
No, I haven't,
and I certainly will not try it.
I highly recommend doing that.
I highly recommend people to
package packages into rpms on rpm-based
distros instead of trying to out-smart themselves (which is what I fell
currently is happening).