Changes between Initial Version and Version 1 of Ticket #28332, comment 4


Ignore:
Timestamp:
Nov 5, 2018, 7:40:43 PM (11 months ago)
Author:
wagon
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #28332, comment 4

    initial v1  
    22So, I can install on my system any trojan, run it, and later verify that this trojan was OK? No, it doesn't work this way. Once you installed it in `/usr`, and once it touched some important files, your system cannot be trusted again.
    33
    4 Well, I can clone it to in some virtual machine and (suppose) verify it by the last commit. Then, what's the next? I need to move this trusted tree to my main system, where old `nyx` was installed using `pip3`. As I understand, git nyx version is not a python package, so it is not that simple. Either I have to learn how to install it to some local directory in parallel to main installation, or figure out how to replace all files of existing installation manually.
     4Well, I can clone it in some virtual machine and (suppose) verify it by the last commit. Then, what's the next? I need to move this trusted tree to my main system, where old `nyx` was installed using `pip3`. As I understand, git nyx version is not a python package, so it is not that simple. Either I have to learn how to install it to some local directory in parallel to main installation, or figure out how to replace all files of existing installation manually.
    55
    66And all of that just because you cannot give a link to current version with singed tarball. I spent few days to commit my tickets, I'm not payed for it, and I am not eager to learn `git` and `pip3` internals now only to commit a couple of more tickets. I'm sorry.