logoalt Hacker News

greatgibtoday at 9:51 PM4 repliesview on HN

It blows my mind that nowadays, some random tools on internet tells you to do "curl -fsSL https://.... | bash" to install some "binary" things and a lot of people will do it without hesitation.

It probably explains why there is so many data leaks recently but it is like we did a 20 years jump back in time in terms of security in just a few years.


Replies

pwdisswordfishytoday at 10:21 PM

One day folks who live inside commandlines and TUIs all day will realize that there's nothing particular about webapps or the sandboxes that they execute in that requires we build exclusively graphical runtimes around them, instead of taking advantage of the same security and distribution model for programs accessible and usable from within terminal emulator.

flamestrotoday at 9:58 PM

I get the hesitation :D But the code is open and the install.sh is as minimal as it gets tbh. Still, as said, I get the hesitation. What a time to be alive.

It does not install binaries, it builds the binary by checking out the project basically. You can also do the process manually and use the tool.

show 1 reply
jadentoday at 10:26 PM

Is it that different from downloading and running a binary?

holoduketoday at 10:05 PM

Cowboys rule the internet.