Verify particular software is not a trojan
 

Hi Linuxers,

I got a question:
I have a user in my company that uses http://cloudport.xyz/ service to access our corporate network from outside.

This thing generates you a binary you run on your Linux machine, but how could I know this is not a trojan or virus? Any way to check it?

Thank you! :hattip:

Build it yourself:

https://github.com/ivanilves/ptu/

Or, one level down from that would be to audit that code and then trust that cloudport is building it as advertised and not injecting bad things into the binary before delivery.

Better still, imho, would be to provide users a way to do this that you (or IT) governs. That way, you discourage people from going out and finding their own (possibly unsafe) ways of doing it.

Thank you!

Makes sense totally what you said about our IT. ;)

Virustotal.com