In my competitive industry I often have to install half baked software often written without security in mind and written by folks from all over the world that I’ve never met
Nothing gives white knuckles like piping a curl output to bash because your boss says to try out a program their friend found and you don’t have time to audit anything.
Though your point still holds. If you are careful you can do this with relative safety in Linux. Windows makes it harder tho
I just use disposable VMs or containers for that stuff, with limited network access. I’d always rather have a real security boundary than databases and heuristics.
In my competitive industry I often have to install half baked software often written without security in mind and written by folks from all over the world that I’ve never met
Nothing gives white knuckles like piping a curl output to bash because your boss says to try out a program their friend found and you don’t have time to audit anything.
Though your point still holds. If you are careful you can do this with relative safety in Linux. Windows makes it harder tho
I just use disposable VMs or containers for that stuff, with limited network access. I’d always rather have a real security boundary than databases and heuristics.