Daniels118
Advanced Member
Italy
Joined: Nov 17, 2021
Post Count: 407
Status:
Offline
|
|
|
Re: Is there a plugin to measure things in aerial view?
|
The plugin manager reads the list of the available plugins from my own website. The website hosts just the list of the plugins (along with some details such as description, available languages, and so on), while the plugins binaries are hosted on sweethome3d.com or sourceforge.com. The list is downloaded from the following url that you can see (and change) from the settings of the plugin manager:
https://daniels118.altervista.org/sh3d/pluginmanager/plugins.xml
Any plugin developer can get an account on my website to manage his own plugins, BUT the binaries MUST be hosted on sweethome3d.com (official plugins made by PUYBARET) or sourceforge.com (3rd parties), there is no chance that they come from other sources. Actually there are just 2 developers (other than me) who maintain their plugins, the rest is managed by me.
About security, the plugins that you download using the plugin manager are as secure as the ones that you may download from the respective sources.
The real question should be: how can I trust a software that I haven't written with my own hands? Who tells me that the plugin, the main software, or even the operating system I'm working on, don't send my credit card numbers to the developer? There are 2 cases:
- With proprietary software, the assurance comes from the fact that the organization that sell the software can be pursued by law if developers put malicious code in their software, so large organizations tend to make internal security controls on the software they release.
- With open source software, any person capable of reading the code can check if the software contains malicious code. Of course, such people should check that the compiled binaries distributed don't contain hidden code that isn't shown in the released sources. People that aren't able to read the code should count on the fact that others could have done this before. Moreover, a developer who wants to spread malicois code won't be so stupid to put his real name and his face on the web, so if you can check the identity of the account that distributes the software, he is most likely acting good.
By the way, I can assure that my programs have no malicous code and I have great respect for privacy, but I give no guarantee about the other plugins downloaded through the plugin manager. I make no security check on the plugins made by other developers, you install them at your own risk (sounds ugly, but that's the truth).
My recommendations are:
- never run software that you don't trust with admin privileges;
- use a good antivirus.
|
[Feb 18, 2024, 9:33:00 PM]
|
|
[Link]
|
|
