On Mon, 27 Sep 2021, 00:01 Volker Braun, <vbraun.n...@gmail.com> wrote:
> On Sunday, September 26, 2021 at 11:34:33 PM UTC+2 dim...@gmail.com wrote: > >> I don't really see how homebrew is different from a rolling Linux distro. >> > > Homebrew doesn't come from the OS vendor. No automatic security updates. > There is no package management where the admin can look up if any > suspicious file was installed by homebrew. You can't verify that the files > in /usr/local are actually from homebrew, and not tampered with. The > homebrew installation process is not cryptographically signed. I can go on > if you want me to... > Homebrew need not be installed into /usr/local, and doesn't need root if one chooses not to install there. Homebrew packages do come with sha256 hashes. Not sure if it's any less secure if than conda if used this way. > > Conda, on the other hand, doesn't need root. Its as safe as any other user > space app. You don't need admin permissions, and the standard unix > permissions prevent you from screwing over other users on the system. > > -- > You received this message because you are subscribed to the Google Groups > "sage-devel" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to sage-devel+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/sage-devel/0a523dcb-c97b-44f2-90cd-353d88f04a91n%40googlegroups.com > <https://groups.google.com/d/msgid/sage-devel/0a523dcb-c97b-44f2-90cd-353d88f04a91n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "sage-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to sage-devel+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/sage-devel/CAAWYfq3fXc4Gad3EX-_h8mUQKB5%3Dontthc18p1GtDOVOaTMR5w%40mail.gmail.com.
