Downloaded .deb safe?

[Stanislas Breton]

Nigel Ridley wrote:
> How does one make sure that a downloaded .deb is safe? I mean, how does one make sure that 
> there are no malicious payloads etc.?
> The file in question is the winff-0.41-i386.deb downloaded from:
> http://www.winff.org/
>
> It looks like a very useful app (for my daughter's 'chipod' (Chinese MP4)) but I want to 
> make sure it is safe before installing it.
>
> Blessings,
>
> Nigel

If security's a paramount concern, follow long-standing Unix security
practice and inspect the source code. If you're unable to inspect the
source code, or don't consider yourself technically competent to inspect
the source code for possible malware content, then don't install it.