Running Untrusted Code
Discussions center on the security risks of executing code that users haven't written, read, or fully audited themselves, particularly from external sources like GitHub, highlighting concerns about malicious tricks, vulnerabilities, and the need for verification.
Activity Over Time
Top Contributors
Keywords
Sample Comments
You're running code you didn't write or entirely read yourself.
What's horrible about running your own code?
Mabye you wont, but someone else do it. It would be pointless to open code with unwanted tricks behind.
Well, you'd have to really trust the code you're loading.
All code is arbitrary code if you are paranoid enough. :)
Totally agree with this, hence the caveat that the code doesn't get leaked/compromised :)
It scales to "don't run untrusted code if you are concerned about security"
If the code is unfit for others to read why is it being shipped in production devices?
Yes, make sure you inspect it before executing... If someone hijacks my github account, puts on some bad code and you run this, you're screwed.
Where in the article does it advocate running untrusted code?