News for hackers. Stuff that matters.

A comment on Downloading Software Safely Is Nearly Impossible. Parent comment

Re:Downloading Software Safely Is Nearly Impossible by FigBug on Monday March 03, 2014 @02:06PM (#7335667)
It will take a combination of things.

Sandboxing applications would be a good start. That way you don't need to trust application developers.

[ Parent | on HN ]
Re:Downloading Software Safely Is Nearly Impossible by acct on Monday March 03, 2014 @03:01PM (#7336063)
But surely you must trust your SSH client, and thus its developers.
[ Parent | on HN ]
Re:Downloading Software Safely Is Nearly Impossible by FigBug on Monday March 03, 2014 @03:50PM (#7336352)
Right now it is pretty much a binary choice - trust and install. Don't trust and don't install. I trust the developer to have implemented the SSH protocol correctly -- I have to trust them that much. But I don't see why I should have trust them enough to give them full permissions to my machine. Sandboxing (with permissions) would allow the application to run and access a port, nothing else.
[ Parent | on HN ]