On Aug 1, 2019, at 13:38, Daniel Okey-Okoro wrote:
>
>
> > not a strong enough justification for breaking any code that uses "no" in
> > any other way.
>
> This is a very crucial point I didn't consider.
>
>
>
> What if we could le
On Jan 8, 2020, at 01:09, Abdur-Rahmaan Janhangeer wrote:
>
> But now, a malicious program might try to modify the info file
> and modify the hash. One way to protect even the metadata is
> to hash the entire content
>
> folder/
> file.py # we can add those in a folder if needed
> __main
On Jan 8, 2020, at 01:09, Abdur-Rahmaan Janhangeer wrote:
>
> Using the wheel-included zip (A), we can generate another zip file (B) with
> the packages installed. That generated zip file is then executed.
But that generated zip B doesn’t have a trustable hash on it, so how can you
execute it?