Comment by fijiaarone
Comment by fijiaarone 10 months ago
Everyone has been trained for years to do this:
curl http://obscure.url?random-string | sh
Comment by fijiaarone 10 months ago
Everyone has been trained for years to do this:
curl http://obscure.url?random-string | sh
No they haven’t, they’ve been trained to do
curl https://url-of-well-known-project | sh
or even this:
git clone http://github.com/unknown/repo.git && cd repo && npm install
I guess you don’t think the Rust programming language is a serious project, then?
My issue is the bypassing of the systems package manager. Doing so will result on files spread somewhere over the system. How do you uninstall such thing properly? How do you update (or even know) it's dependencies? Will it break because I uninstall or update one of it's dependencies?
Linux has a very good package management for many years. I see absolute no reason to break this by creating shell installers.
If there were a legitimate looking GitHub how-to page that asked me to do that, I can see myself doing it. Fortunately, I ignore all security issues on my repositories.