Hacker News new | ask | show | jobs
by blueflow 1234 days ago
If you trust your upstream, then the checksum is enough. If you don't trust your upstream, its sort of an RCE anyways.