How to take over the computer of a Maven Central user

Re:How to take over the computer of a Maven Central user by homulilly on Monday July 28, 2014 @07:20PM (#8099871)

There's two problems with this that I see. The first is, as you said, that a lot of people won't even realize they need to pay for secure downloads.

I also feel like in the case of something like a package manager, this potentially harms the wider community in ways that charging for features in a specific piece of software doesn't.

[ Parent | on HN ]

Re:How to take over the computer of a Maven Central user by technomancy on Monday July 28, 2014 @10:55PM (#8100482)

Technically paying for an auth token is not sufficient. The token cannot be used directly by Maven or Leiningen, but only by a Nexus proxying repository manager. Not a big deal if you work at a professional Clojure shop, but a huge hassle if you're freelance or just getting started.

[ Parent | on HN ]

Re:How to take over the computer of a Maven Central user by sitkack on Monday July 28, 2014 @11:51PM (#8100592)

It is like having a population partially vaccinated, almost pointless on a large scale.

[ Parent | on HN ]