In This Episode
Tonight on the PowerScripting Podcast, we talk to Matt Wrock about BoxStarter
The Chicago PowerShell User Group is meeting May 8th
Guest - Matt Wrock
[22:43:30] <Jaykul> FWIW, my 2c: I think a "moderated" feed (where you just trust the core chocolatey team to review packages, instead of trusting all the authors) is the answer to "trust" -- the idea being the core team says that yes, this module just downloads and installs "the real product" that it claims to.
<Jaykul> ## Have you heard rumors that chocolatey may move away from nuget?
<Jaykul> ## Are you involved in the chocolatey community at all?
<Jaykul> ## Are you (un)happy/neutral that Chocolatey has moved their lib/install folders to C:\ProgramData
<Jaykul> ## Are you (un)happy/neutral about the idea of expecting users to be "elevated" when running cinst?
<Jaykul> ## Does that mean boxstarter only works on machines that have access to the public internet? <-- I know it does, just want to bring it up
<Jaykul> ## What do you think about a "Moderated" feed like NuGet has for Microsoft
<Jaykul> ## Isn't virus scanning the package mostly useless, since the package is just a script that downloads from the web? Would you guarantee that the install.ps1 can't download anything without scanning it?
<Dave_Wyatt> ## Assuming that malicious code does make it into Chocolatey, what's the response? API keys revoked, packages taken offline, etc? How fast would that happen?
<JonWalz> if you use LastPass check out this tool http://blog.lastpass.com/2014/04/lastpass-now-checks-if-your-sites-are.html
<halr9000> Downloading SublimeText3 64 bit (http://c758482.r82.cf2.rackcdn.com/Sublime%20Text%20Build%203059%20x64%20Setup.exe
<Jaykul> halr9000: http://c758482.r82.cf2.rackcdn.com/Sublime%20Text%202.0.2%20x64%20Setup.exe <-- that's the "official" download link.
<Jaykul> Sorry, yeah, http://c758482.r82.cf2.rackcdn.com/Sublime%20Text%20Build%203059%20x64%20Setup.exe my point is that your url was the official one
<halr9000> e.g. http://boxstarter.org/package/nr/firefox
<mwrock_> http://boxstarter.org/WebLauncher has links to the firefox and chrome click once extensions at the end of the page
The Question -
- Superhero - Professor Time