News for hackers. Stuff that matters.
Re:QIRA is a timeless debugger by theoh on Saturday January 30, 2016 @12:25AM (#11000661)
There was previously a discussion of related issues here:

https://news.ycombinator.com/item?id=6650987

At the end of the day you've got to trust someone even if you download a signed archive of source code. You can't audit every line.

Re:QIRA is a timeless debugger by comex on Saturday January 30, 2016 @03:46AM (#11001142)
You have to trust someone. You don't have to trust whoever is currently MitMing your Internet connection because the authors didn't bother to add HTTPS support.