Re:Bing has been serving up malicious Google Chrome ads for ...
by TeMPOraL on Monday October 29, 2018 @02:18AM
(#18325413)
I do a simplified version of it:
1. Search for the name of software on Google.
2. See if something looking like a site for the product shows up.
3a. If a product site shows up, I take a careful look around, and if it feels legit, I manually find the download link and use it.
3b. If a SourceForge link shows up, I proceed to the download. This is rare, but some program authors don't bother setting up their own sites, and I'm yet to see a malicious SF repo.
This is less secure than your procedure, but worked well enough so far.
1. Search for the name of software on Google.
2. See if something looking like a site for the product shows up.
3a. If a product site shows up, I take a careful look around, and if it feels legit, I manually find the download link and use it.
3b. If a SourceForge link shows up, I proceed to the download. This is rare, but some program authors don't bother setting up their own sites, and I'm yet to see a malicious SF repo.
This is less secure than your procedure, but worked well enough so far.