sysutils/ipfs-go downloads pre-built binaries while sources are available

Yuri yuri at rawbw.com
Mon Mar 12 20:55:21 UTC 2018


On 03/12/18 13:42, Adam Weinberger wrote:
> While source is preferred over binary, we don’t delete ports just 
> because they have binary blobs. 


Binary downloads have an entirely different trust model. You have to 
trust the producer of the binary, vs. with source code it is much more 
obvious what does it do. Neglect or misunderstanding of this difference 
leads to rampant spread of malware on Windows and cell phones.


Yuri




More information about the freebsd-ports mailing list