The Apiiro research team has detected a repo confusion campaign that has evolved and expanded, impacting over 100k GitHub repos with malicious code.
  • delirious_owl
    41·
    10 months ago

    AppImages actually do have (optional) support for signatures.

    • Pantherina@feddit.de
      2·
      10 months ago

      They have no update feature afaik, how does this work? What verified this signature, the user?

      • delirious_owl
        2·
        10 months ago

        Its a subcommand of the AppImage. The developer adds the signature to the AppImage and the user verifies it after download with the subcommand.