News for hackers. Stuff that matters.

A comment on The Windows installer of ImageMagick will no longer be signed. Parent comment

Re:The Windows installer of ImageMagick will no longer be si... by gary_0 on Sunday October 29, 2023 @02:17AM (#38056203)
A certificate that says "this installer really did come from the owner of exampleapp.com" is better than users just trusting whatever random file came up in a Google search.

And meanwhile, in Linux land, people will install things by piping curl into bash[0][1], so the bar is just not that high. And the ultimate answer to security will come from better app sandboxing, not from charging every native-app developer in the world $700/year for a code signing certificate.

[0] https://docs.chef.io/chef_install_script/ [1] https://github.com/zyedidia/micro#quick-install-script

[ Parent | on HN ]
Re:The Windows installer of ImageMagick will no longer be si... by charcircuit on Sunday October 29, 2023 @03:40AM (#38056544)
>meanwhile, in Linux land

Just because some operating systems are decades behind on security that does not mean that security does not matter.

[ Parent | on HN ]