Fair point, Neal. The pull request process means there is human review and approval, plus a set of automated malware checks, but it's certainly not foolproof. If security is a top concern, building from source is probably the best bet.
On Tue, Jul 18, 2023 at 9:49 AM Neal Pollack via wsjt-devel < wsjt-devel@lists.sourceforge.net> wrote: > Regarding the winget repository for installs, and your statement: > " > > *This is great for automated system installs! I'll attempt to keep the > version here up-to-date, but any developer can submit manifest updates via > GitHub pull request.*"; > Am I misunderstanding that this is a terrible security risk, since > apparently anyone > can alter the installation manifest, and therefore future installs could > be installing > malware rather than WSJT-X? Or do I misunderstand? > > Neal > > On Tue, Jul 18, 2023 at 5:59 AM <wsjt-devel-requ...@lists.sourceforge.net> > wrote: > >> Send wsjt-devel mailing list submissions to >> wsjt-devel@lists.sourceforge.net >> >> To subscribe or unsubscribe via the World Wide Web, visit >> https://lists.sourceforge.net/lists/listinfo/wsjt-devel >> or, via email, send a message with subject or body 'help' to >> wsjt-devel-requ...@lists.sourceforge.net >> >> You can reach the person managing the list at >> wsjt-devel-ow...@lists.sourceforge.net >> >> When replying, please edit your Subject line so it is more specific >> than "Re: Contents of wsjt-devel digest..." >> >> >> Today's Topics: >> >> 1. WSJT-X published to WinGet (Chris Keller) >> 2. Transverter Offset (tom) >> >> >> ---------------------------------------------------------------------- >> >> Message: 1 >> Date: Mon, 17 Jul 2023 11:58:16 -0600 >> From: Chris Keller <chris@k0swe.radio> >> To: wsjt-devel@lists.sourceforge.net >> Subject: [wsjt-devel] WSJT-X published to WinGet >> Message-ID: >> <CANpeW-xw8zimvFTbsK_x7O4tv3tKU2RFfCex7RMqTWWD= >> kp...@mail.gmail.com> >> Content-Type: text/plain; charset="utf-8" >> >> Hello folks, >> >> I wanted to let you know that I've published a manifest >> <https://github.com/microsoft/winget-pkgs/pull/111637> for WSJT-X in >> Microsoft's official Windows Package Manager, a.k.a. WinGet. Users >> comfortable with the command line can now install WSJT-X with the command: >> >> winget install -e --id K1JT.wsjtx >> >> This is great for automated system installs! I'll attempt to keep the >> version here up-to-date, but any developer can submit manifest updates via >> GitHub pull request. >> >> 73, >> Chris K0SWE >> -------------- next part -------------- >> An HTML attachment was scrubbed... >> >> ------------------------------ >> >> Message: 2 >> Date: Tue, 18 Jul 2023 11:30:16 +0100 >> From: tom <t...@tkrh.co.uk> >> To: WSJT software development <wsjt-devel@lists.sourceforge.net> >> Subject: [wsjt-devel] Transverter Offset >> Message-ID: <2d867620-9fa1-4cfc-a25d-e204f3d5c...@tkrh.co.uk> >> Content-Type: text/plain; charset="us-ascii" >> >> Hi - posted on main list but no final solution. >> >> Windows 11, wsjt-X 2.6.2 and 2.7.0-rc2 >> >> Setting up a 23cms Transverter with a 28 MHz IF - seems to be an issue. >> Used an offset -1268 and wsjt-x displayed 23cms ok but cat jumped rig to >> 1.065 MHz. >> >> >> Tried the example given on archive for 2m offset -116 and all worked >> fine, cat kicked in and rig (TS680) switched to 28 Mhz and WSJT-X displayed >> 144 MHz. >> >> Could it be the , in offset freq -1268 is entered and software formats it >> to -1,268.000 000 MHz. >> >> Tried the same setup with MSHV and WSJT-X-Improved and worked as expected >> with -1268 offset. Cat and freq both ok. >> >> Thanks in advance for any suggestions but it does look like a bug rather >> than user error. >> >> Tom GM8MJV >> t...@tkrh.co.uk >> >> >> >> >> >> -------------- next part -------------- >> An HTML attachment was scrubbed... >> >> ------------------------------ >> >> >> >> ------------------------------ >> >> Subject: Digest Footer >> >> _______________________________________________ >> wsjt-devel mailing list >> wsjt-devel@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/wsjt-devel >> >> >> ------------------------------ >> >> End of wsjt-devel Digest, Vol 113, Issue 23 >> ******************************************* >> > _______________________________________________ > wsjt-devel mailing list > wsjt-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wsjt-devel >
_______________________________________________ wsjt-devel mailing list wsjt-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wsjt-devel
