Programmer Humor

42235 readers

5 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

Posts must be relevant to programming, programmers, or computer science.
No NSFW content.
Jokes must be in good taste. No hate speech, bigotry, etc.

founded 6 years ago

MODERATORS

cat_programmer@lemmy.ml

156

‘No Way To Prevent This,’ Says Only Package Manager Where This Regularly Happens (kevinpatel.xyz)

submitted 6 days ago by davel@lemmy.ml to c/programmerhumor@lemmy.ml

13 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] pivot_root@lemmy.world 15 points 6 days ago (1 children)

Cargo distributes libraries as sources, not precompiled objects.

[–] moonpiedumplings@programming.dev 2 points 6 days ago (1 children)

Yes, that is true.

Thought, even this remains problematic because cargo does execute build/compile time scripts, unsandboxed, that can be used to do malicious things, similar to the problems with npm.

[–] locuester@lemmy.zip 10 points 6 days ago

But “you would have to reverse engineer binaries” is objectively false, since packages are source.

I agree on your other point, but you really should edit the misinformation.