Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by mkagenius | Hacker News Reader

Full thread

mkagenius·

But how do we know it is actually powered by Keybase. I dont even know what is a dschep.

But I guess you got to start somewhere.

View on HN

Just click the Keybase link next to the username, and you can verify each of the connections yourself.

This and what the author said basically.

> Just click the Keybase link next to the username, and you can verify each of the connections yourself.

Ah. I thought the logo itself meant its verified (like on twitter).

What pcmonk said. And:

* I'm a dschep, sorry I don't work at keybase

* it's open source

* extensions are easy to unpack & view the source if you don't trust I'm not tampering the extension before upload

* I do no obfuscation of the JS, it's only 201 LOC

> * extensions are easy to unpack & view the source if you don't trust I'm not tampering the extension before upload

Surprised browsers plugin centers (stores?) don't let you just put your github repository and build your extension depending on a given branch (or tags) and then informs the user that the extension was directly pulled from GitHub or other version control sources (and provides a direct link) it would be a little more interesting.

That would mean they get published without any checks - an easy attack vector for malware.

If pull requests are auto accepted sure? But that shouldn't normally be the case.

That'd be neat. Like docker hub supports and f-droid requires(IIRC)!

Reply on news.ycombinator.com