The Apiiro research team has detected a repo confusion campaign that has evolved and expanded, impacting over 100k GitHub repos with malicious code.
    • delirious_owl
      41·
      9 months ago

      AppImages actually do have (optional) support for signatures.

      • Pantherina@feddit.de
        2·
        9 months ago

        They have no update feature afaik, how does this work? What verified this signature, the user?

        • delirious_owl
          2·
          9 months ago

          Its a subcommand of the AppImage. The developer adds the signature to the AppImage and the user verifies it after download with the subcommand.