8 ms·

Why not run it on your main OS? Otherwise, Docker is fine.

• andersa 3y ago
  Because it installs like 100,000 python scripts of mystery origin that run with full privileges. Even if the maintainers are unlikely to be malicious on purpose, it only takes one person accidentally putting a typo in a dependencies file in one of the hundreds of packages it imports... many of which not commonly used ones.
  • gkbrk 3y ago
    Why are you running it with full privileges? It's one command to create a user on Linux, and another command to switch to it.
    • nicolaslem 3y ago
      It's better than nothing but is it enough to run potentially malicious code? I haven't checked recently but a while ago most distros defaulted to letting anyone peep into other users' home dirs. Moreover there has been so many exploits over the years letting a user gain root privileges that, for the purpose of security, unix users are akin to a bathroom lock.
      • unmole 3y ago
        > I haven't checked recently but a while ago most distros defaulted to letting anyone peep into other users' home dirs. Yeah, no.
  • ageofwant 3y ago
    no it doesn't