Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Installation step: yandex disk for libcrypto-1_1-x64.dll #107

Open
SwiftAdviser opened this issue Jan 9, 2023 · 1 comment
Open

Installation step: yandex disk for libcrypto-1_1-x64.dll #107

SwiftAdviser opened this issue Jan 9, 2023 · 1 comment

Comments

@SwiftAdviser
Copy link

Bug Type

Security

Reproduction steps

  1. Go to https://github.com/disintar/toncli/blob/master/INSTALLATION.md
  2. Try to download libcrypto-1_1-x64.dll

Actual result

You are obligated to download an unverified .dll file from yandex disk.

Expected result

  1. You can be sure that the library is verified
  2. You can download the library from the official source
  3. OR you can download the library from the non-russian-government cloud (not yandex.ru, mail.ru, or similar)

Suggested Severity

Vulnerability

Device

any

Additional Context

It's important, as TON Ecosystem grows, and if toncli wants to get more developers outside of Russia, better to rely on official resources, or at least services not connected to the Russian government (which sounds in-secure for the privacy of developers from the EU, and USA)

@tvorogme
Copy link
Contributor

tvorogme commented Jan 9, 2023

LGTM, waiting for PR by community

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants