On Mon, 16 Feb 2015 22:48, js-gnupg-us...@webkeks.org said: > @bash -c "$$(curl -fsSL > https://raw.github.com/GPGTools/GPGTools_Core/master/newBuildSystem/prepare-core.sh)"
Bad idea to directly run code from a foreign remote site. I'd appreciate if someone from gpgtools.org can comment on this. GnuPG's speedo build system also downloads stuff via the Makefile but it verifies the checksums before proceeding. The checksums are taken from a public file which has a detached signature and the public key for that is one of the GnuPG release signing keys. Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. _______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
