• Ephera@lemmy.ml
    link
    fedilink
    arrow-up
    5
    ·
    1 month ago

    The “Ventoy Update” post looks rather suspicious to me. The dev didn’t respond to the GitHub issue, so this might just be some jackass pretending to be the dev.

    But independently of that, the BLOBs are even more suspicious…

    • Quail4789@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 month ago

      i’d brush the blobs off as secure boot stuff if the dev didn’t ignore the issue for months. Now that’s sus.

  • callcc@lemmy.world
    link
    fedilink
    arrow-up
    2
    ·
    1 month ago

    I understand how this could be a prime target of a supply chain attack and that things are a bit fishy. On the other hand people are waaaay less picky about installing other binary blobs on their machines. I wish paranoia would be more general :)

  • cygnus@lemmy.ca
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    1 month ago

    Funny, I’m flashing a new PC as we speak and using dd instead of ventoy for this very reason. I’ve also used Balena Etcher in the past.

  • Aatube@kbin.melroy.org
    link
    fedilink
    arrow-up
    1
    ·
    1 month ago

    note that the blobs aren’t unknown, they’re builds of submodules that the developer hopefully hasn’t added malware to

  • selokichtli@lemmy.ml
    link
    fedilink
    arrow-up
    1
    ·
    1 month ago

    I stopped using Ventoy. I don’t trust the OSs installed by means of it, sadly. Also, lost any hope of a clarification on the issue. Yes, you should not use it for the time being.

  • davel@lemmy.ml
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 month ago

    I wouldn’t trust it in its current state. Maybe things will get cleared up in time, maybe not.

    With that said, how necessary is Ventoy, really? How much time & effort is it really saving you?

    • yo_scottie_oh@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 month ago

      Not strictly necessary, but being able to carry all my ISOs on a single USB key saves me from having to redo the whole USB Stick Writer thingy every time. Is there another tool out there that does this and makes it easy for the plebs like myself?

    • unknowing8343@discuss.tchncs.de
      link
      fedilink
      arrow-up
      1
      ·
      1 month ago

      I mean, being able to carry a little thing with multiple OSs AND STILL being able to use it as portable storage for other stuff is really useful.