Simone Manganelli
After the Sparkle security vulnerability found and the malware delivered via Transmission, how the heck can I trust any downloads anymore?
-
@simX It's weird that Sparkle devs had the foresight to verify signatures but intentionally disabled WebView security features.
Rosyna Keller
Michael Tsai-
-
@mjtsai It's that navigation policy thing I mentioned before. Sparkle devs made it pass all URLs to LaunchServices, which is not a default. - View other replies
-
@rosyna Right. Thanks for reminding me.
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.