Re:Welcome to Comprehensive Rust
by sofixa on Thursday December 22, 2022 @06:54AM
(#34092469)
You meant a binary blob in your distro's repository, so one that was checked, tested, approved and verified with a hash. Which is wildly different than downloading and running random binaries or scripts for that matter off the internet.
[ Parent
| on HN ]
No, it's hardly random, it's an official binary provided the Rust project from an official domain managed by the Rust project. If you don't trust it, then you shouldn't trust the Rust source code either.
Re:Welcome to Comprehensive Rust
by yencabulator on Thursday December 22, 2022 @04:05PM
(#34098671)
In this case, the Google internal course explicitly does not trust that random shell script, even if it came from rust-lang.org, while their internal apt repository is trusted. See https://news.ycombinator.com/item?id=34092187