logoalt Hacker News

KennyBlanken01/22/20251 replyview on HN

[flagged]


Replies

woodruffw01/22/2025

Apart from the snark (which is unwarranted), I can't even parse what you're saying.

(Mentioning sudo in the context of Homebrew suggests that you're one of those incoherent threat model people, so I'm going to assume it's that. So I'll say what Homebrew's maintainers have been saying for years: having a user writable Homebrew prefix is no more or less exploitable in the presence of attacker code execution than literally anything else. The attacker can always modify your shell initialization script, or your local Python bin directory, or anything else.)

show 1 reply