News for hackers. Stuff that matters.

A comment on Codehash.db – A public database for software and firmware hashes. Parent comment

Re:Codehash.db – A public database for software and firmware... by n1000 on Saturday November 12, 2016 @11:07AM (#12938504)
Sorry, I am new to this, but my understanding is that homebrew will verify the hash before installing, right?
[ Parent | on HN ]
Re:Codehash.db – A public database for software and firmware... by dom0 on Saturday November 12, 2016 @11:49AM (#12938707)
It probably does, but what good does that do if the source code wasn't transported securely and verified from the upstream to the packager?

Disclaimer: I don't know anything about brew packaging practices. Maybe they always require verification. Maybe they don't.

[ Parent | on HN ]