should i be worried about security if i use this software
Basically, worry less if:
- it's source code is actively maintained and scrutinised by peers and users,
- it's source code has been packaged and GPG signed by the authors,
- it doesn't (have a server component that) expose(s) your system to world,
- it doesn't need to be run setuid <any privileged account>,
- you run the soft from an unprivileged account,
(- you run a LIDS or Grsecurity-reinforced kernel).
|