logoalt Hacker News

angry_octettoday at 12:23 AM4 repliesview on HN

We might also ask, why doesn't Linux also track such meta-data? Are Linux users not also subject to drive-by downloads impersonating valid files? Should we be one chmod a+x away from compromise?


Replies

danielheathtoday at 12:32 AM

Yes, we should be.

My computer should run programs when I tell it to run them.

Don’t blunt _every_ tool just to make them harder to cut yourself on.

show 4 replies
emmelaichtoday at 1:39 AM

Tar on linux will. e.g. selinux attrs and other xattrs.

Open question, is it worth attempting to main these semantics between mac and linux.

nottorptoday at 10:42 AM

> Are Linux users not also subject to drive-by downloads impersonating valid files?

Linux users generally install software with apt or rpm. Or steam.

The existence of any executable file outside the system dirs it a red flag in itself.

bitfilpedtoday at 1:01 AM

Should I be able to run files I download on my own computer? I think yes I should, hate fighting MacOS to do simple tasks because Apple engineers assume the end user has the average intelligence of an ostrich.

show 1 reply