summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJoey Hess2016-04-05 13:19:05 -0400
committerJoey Hess2016-04-05 13:19:05 -0400
commitf093568d9156e551071a0ad2583a03307b717aa2 (patch)
tree9b0a6e9359315fc651e21c37c232bff7299904f8
parent544492d4064d723be10d07e1469f380ea37d76fd (diff)
parent320fd857a7b8dd1ec1173740819b074f21b077b0 (diff)
Merge remote-tracking branch 'origin/master' into joeyconfig
-rw-r--r--doc/forum/concurrent-output_dependency_implies_compilation_of_a_lot_of_unstrusted_sources_as_root.mdwn3
1 files changed, 3 insertions, 0 deletions
diff --git a/doc/forum/concurrent-output_dependency_implies_compilation_of_a_lot_of_unstrusted_sources_as_root.mdwn b/doc/forum/concurrent-output_dependency_implies_compilation_of_a_lot_of_unstrusted_sources_as_root.mdwn
new file mode 100644
index 00000000..c40b29ef
--- /dev/null
+++ b/doc/forum/concurrent-output_dependency_implies_compilation_of_a_lot_of_unstrusted_sources_as_root.mdwn
@@ -0,0 +1,3 @@
+The recent dependency on concurrent-output adding implies downloading, compiling, and executing as root of many (MissingH, hslogger, process, unix-compat, network, directory, ansi-terminal, unix, ...) unstrusted sources. This seems like a huge security problem...
+
+Are these at least downloaded using https?