|
|
|
|
|
|
by nvme0n1p1
2 hours ago
|
|
|
The version string is used to build an external URL. You're right, I don't audit every line of code in new versions of Firefox/Chrome/etc. I chose to trust the download URL when I first installed that package. Then on updates, I can check at a glance that the script hasn't changed to point to another URL or in other suspicious ways. There are two possible threats here: "random AUR user" and "Google". I'm protected from the former deciding to bundle malware, but not the latter. |
|
|