-
Notifications
You must be signed in to change notification settings - Fork 12
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Encourage Users to verify checksums for wget'd scripts. #71
Comments
Currently, the occurences of
For the generic conda instructions I've added example use of It may be better to change the examples to fetch specific versions of conda, and include the known hash for the provided version in the sample code blocks, with the location of where to find the expected checksums as text? |
Users are currently told to
wget
and execute arbitrary scripts during conda installation (and potentialyl others) to install tensorflow etc.Users will download and run arbitrary scripts if it allows them to get work done, so rather than fight it we should strongly encourage users to verify the integrity of scripts (via checksums) and ideally inspect them prior to execution.
Any examples of this in the docs should be updated to include this (i.e. conda installation).
The text was updated successfully, but these errors were encountered: