• 1 Post
  • 121 Comments
Joined 6 years ago
cake
Cake day: July 17th, 2018

help-circle


  • @gomp try comparing it with apt install, not with downloading a .deb file from a random website - that is obviously also very insecure. But the main thing curl|sh will never have is verifying the signature of the downloaded file - what if the server got compromised, and someone simply replaced it. You want to make sure that it comes from the actual author (you still need to trust the author, but that’s a given, since you are running their code). Even a signed tarball is better than curl|sh.















  • @something_random_tho The pathfinding algorithm is in the client app (like Organic Maps) and the data are in openstreetmap. Different apps can find different paths and there is not much we can do about it, because changing the pathfinding algorithm could break it for many other places. That’s why I would rather modify the data, such as marking roads unsuitable for bikes, or making sure the nodes are properly connected, adding speed limits, road surface types… nudge the algo into the right path