HNGlance

Top Best New Show

Distroverify 1.0 released, the ultimate tool to verify ISO's

https://github.com/emilengler/distroverify

by emilengler • 7 years ago

10 2 7 years ago

GI

Related Stories

Loading related stories...

Comments

2

rgovostes• 7 years ago

I think your idea to make it easier for people to verify their OS install media is a good one.

One thing to think about is that the keys and key servers come from your own repo. How are people going to be sure that your repo contains the right values?

rlpb• 7 years ago

I'm not sure this is safe to use. If https://raw.githubusercontent.com/emilengler/distroverify-da... is compromised (for example your GitHub account is compromised) then it looks to me that line 51 of https://github.com/emilengler/distroverify/blob/master/distr... (in commit b55c30c) will give the attacker arbitrary code execution on anyone using this tool.

Source preview

github.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms