Comment Comment by _urga The malicious actor would simply edit the install script to comment out the checksum verification step, since they already own the script. parent _urga 5 years ago