For Molly, I kept seeing this popup by Google when downloading Molly FOSS from fdroid.
Should I be concerned? What should I do to ensure I am downloading Molly from a trusted source if Fdroid isn't an ideal place (due to misleading names as depicted in the referenced post)?
I used to work in a place where we constantly got looked at by security companies and consultants. The wisdom of that time? Companies don’t hire security firms and consultants to find nothing, so no matter how asinine or impractical it is, they’ll still file it because an empty report is bad for business.
Our security handling was pretty strict, and we had to constantly talk customers off the ledge and kindly inform them that their consultant was blowing crazy swamp gas up their asses. My favorite was a firm that listed all Easter eggs as a vulnerability. An open source package could raise the list of developers with a secret key combo, and so the customer saw this on their report and raised a stink. The customer had no idea what this all meant, but their consultant had scared the crap out of them, so we had to layer on a patch to disable the stupid thing.
The last place I worked, we had a cyber security team, whose job it was to send us CVEs to investigate. I mean random CVEs that had zero relevance to our systems or the technologies we used. Sometimes they sent us low level kernel type CVEs and expected us to explain why we weren’t affected. Mostly it was a waste of time. If they knew how to do their job, they’d have a list of technologies we used on each project and could filter out the irrelevant stuff, instead of wasting developer time.
I was wondering how it saved files if it’s livecd only:
“At the moment, GhostWriter can save files only to a diskette. It can’t write them to to a hard drive or a USB drive. Admittedly, saving files to a floppy is easy. The desktop menu includes commands to mount and unmount a diskette drive. But many newer computers don’t come with floppy disk drives.”
This project seems like something someone made for themselves just to fuck around. I don’t know why anyone else would need this.