Hacker News new | ask | show | jobs
by ElectricalUnion 198 days ago
Who signs an "app" when I download it from Homebrew?

If all Homebrew "apps" are the same key then accepting a keyring notification on one app is a lost cause at it would allows things vulnerable to RCE to read/write everything?