I took a look at how exactly
#AppImage works, and uh I don't think these people are taking
#security seriously. Apparently the daemon:
* automatically sets +x on any AppImage file it sees (without asking the user whether they actually trust this random executable that may or may not be a drive-by download),
* announces itself over Zeroconf, and
* is going to do some kind of blockchain thing in the future…?
WTF??? 😬
https://github.com/probonopd/go-appimage/blob/master/src/appimaged/README.mdPeople! Attack surface! Minimize it!
#cybersecurity