How to take over the computer of a Maven Central user

Re:How to take over the computer of a Maven Central user by jontro on Monday July 28, 2014 @07:02PM (#8099816)

This is a horrible policy made by sonatype. A better alternative of mavencentral should be created...

[ Parent | on HN ]

Re:How to take over the computer of a Maven Central user by einrealist on Tuesday July 29, 2014 @03:26AM (#8101081)

It is not the fault of Sonatype. We should not trust Central right away. If I worry about malicious artifacts from Central, I must host my own repository and manage artifacts myself. And that way, I can just map other repositories I trust more.

[ Parent | on HN ]

Re:How to take over the computer of a Maven Central user by lmm on Tuesday July 29, 2014 @05:35AM (#8101364)

Trusting Central > Trusting everyone on the network path between you and central.

[ Parent | on HN ]