Comment on Beginner looking for advice on open-source NAS hardware and OS for self-hosting
Seralth@piefed.seralth.com 1 week agoLiterally everything is vulnerable to supply chain attacks…
Your comment is basically saying don’t go in the sun you will get sunburned so you should always avoid the sun forever.
You HAVE to accept some level of risk if your using literally any software that you don’t make, host, and maintain yourself.
So unless you have actually decent suggestions on ways to prevent issues, improve security or some tips for a new user for best practices.
All your doing is fear mongering and being extremely unhelpful.
moldy_rice@piefed.keyboardvagabond.com 1 week ago
Apt and most package managers have cryptographic verifications on all packaged by default since the 1990s.
Docker pull does not, so it will happily download a maliciously modified image, without checking.
You can go in the sun, but wear sunscreen. You can have sex with a stranger, but wear a condom. You can download software, but check the cryptographic signature.