News for hackers. Stuff that matters.

A comment on Any sufficiently advanced uninstaller is indistinguishable from malware. Parent comment

Re:Any sufficiently advanced uninstaller is indistinguishabl... by ateng on Wednesday September 13, 2023 @07:16AM (#37495200)
>if you don't trust a provider, not only it's not safe to run the program, but it's also unsafe to install it

Isn't it same for windows right now? `.msi` and `.exe` can execute arbitrary code right?

[ Parent | on HN ]
Re:Any sufficiently advanced uninstaller is indistinguishabl... by jraph on Wednesday September 13, 2023 @07:37AM (#37495375)
Yes, absolutely.
[ Parent | on HN ]
Re:Any sufficiently advanced uninstaller is indistinguishabl... by bee_rider on Wednesday September 13, 2023 @07:59AM (#37495551)
The only difference is that you usually trust the repo in Linux, but that’s a pretty significant “only thing,” in the sense that the repo is already the source of your whole system, so it better be trustworthy!
[ Parent | on HN ]
Re:Any sufficiently advanced uninstaller is indistinguishabl... by simiones on Wednesday September 13, 2023 @08:29AM (#37495840)
The "elegant" way of distributing 3rd party software for Linux is to ask the user to add your APT/RPM/[...] repo to their system. And most Linux distro maintainers anyway don't vouch for software in the main repos, beyond basic install-ability. The Debian project for example definitely doesn't do in-depth security analysis of every package in the repos: they just check the license, re-package it, and keep an eye on security updates in upstream.
[ Parent | on HN ]