News for hackers. Stuff that matters.

A comment on Filezilla installer is suspicious again. Parent comment

Re:Filezilla installer is suspicious again by shawnz on Sunday June 24, 2018 @09:07AM (#17386402)
But this negates the advantage of having a small number of trusted repos if you need to add third-party repos for every project.
[ Parent | on HN ]
Re:Filezilla installer is suspicious again by mirimir on Sunday June 24, 2018 @05:04PM (#17388382)
Sure. And it's a tradeoff. The Tor and MPTCP projects came to mind, because I trust them. And there aren't many others that I trust.

My problem is that I prefer Debian stable, which is very conservative about package updates. But sometimes I end up using Ubuntu, because its repo includes newer packages.

Also, my core systems do not include anything except stable Debian. I only use third-party repos in project-specific VMs. I even use Oracle's MySQL Workbench in an Ubuntu VM. And even Windows 10 VMs, when I need Excel or other Windows-only apps. That is, compartmentalization.

[ Parent | on HN ]