Programmer Humor

42189 readers

381 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

Posts must be relevant to programming, programmers, or computer science.
No NSFW content.
Jokes must be in good taste. No hate speech, bigotry, etc.

founded 6 years ago

MODERATORS

AgreeableLandscape@lemmy.ml

cat_programmer@lemmy.ml

106

‘No Way To Prevent This,’ Says Only Package Manager Where This Regularly Happens (kevinpatel.xyz)

submitted 1 day ago by davel@lemmy.ml to c/programmerhumor@lemmy.ml

14 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] pivot_root@lemmy.world 10 points 1 day ago (1 children)

Cargo distributes libraries as sources, not precompiled objects.

[–] moonpiedumplings@programming.dev 0 points 1 day ago (1 children)

Yes, that is true.

Thought, even this remains problematic because cargo does execute build/compile time scripts, unsandboxed, that can be used to do malicious things, similar to the problems with npm.

[–] locuester@lemmy.zip 8 points 23 hours ago

But “you would have to reverse engineer binaries” is objectively false, since packages are source.

I agree on your other point, but you really should edit the misinformation.