Timeline for How can we be safe about code from this site that we install?
Current License: CC BY-SA 4.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 16, 2019 at 16:35 | vote | accept | VicenteC | ||
| Jun 16, 2019 at 14:41 | comment | added | karel | Why don't I explain this more thoroughly in the answer? Because it's not about Ubuntu, therefore off topic. I'm trying to stay on topic in the answer section. If the game runs into extra innings, I can be as off topic as I want to in a topical chatroom without flooding the answer section. | |
| Jun 16, 2019 at 13:42 | comment | added | karel | I review low quality posts at Stack Overflow and I always check back on my work to see if the other reviewers at Stack Overflow agree with me. I frequently see that posts that I recommended deletion of were deleted by a Stack Overflow moderator. This is one example of what I meant by Stack Overflow moderators review code. If it's no good they delete the answer. Not just one moderator, several SO moderators do this every day. | |
| Jun 16, 2019 at 13:27 | comment | added | terdon Mod | SO moderators do not review code! No more than any other user, anyway. And, as you say in the comments, there are no bots checking for malicious code, so I don't really understand what you're suggesting. | |
| Jun 15, 2019 at 3:15 | comment | added | karel | SOBotics and SO Close Vote Reviewers have helped me lot. | |
| Jun 14, 2019 at 23:11 | comment | added | Byte Commander Mod | Ah, cool. So I guess this happens in SObotics? That's nice, I'm really not familiar with most of the things people built there. | |
| Jun 14, 2019 at 23:04 | comment | added | karel | There are bots that scan for plagiarized code. There are also bots that scan for short code snippets that are not accompanied by an explanation of what the code does. However afaik there are not any bots that do deep scanning of code snippets and analyze them for malicious things. As a member of several bot teams I have the privilege of manually reporting my own deep scanning results to the appropriate bot in order to submit it for further review by other reviewers. This is done transparently in a public chatroom and anyone in that chatroom can freely comment about it and frequently does. | |
| Jun 14, 2019 at 22:54 | comment | added | Byte Commander Mod | You mean there are bots that scan posts for code snippets and analyse them for malicious things? I haven't heard of that yet, and tbh I would be surprised if that existed, because it would be terribly complex. Or are you only referring to SmokeDetector and similar? | |
| Jun 14, 2019 at 22:33 | history | edited | karel | CC BY-SA 4.0 |
added 9 characters in body
|
| Jun 14, 2019 at 22:25 | history | answered | karel | CC BY-SA 4.0 |