logoalt Hacker News

luma • today at 4:34 PM • 1 reply • view on HN

Any code I didn't write is arbitrary code. At some point I'm left to trust someone or run no software at all.


Replies

mulmen • today at 4:39 PM

It’s a shell script. You can download and read it before you run it. Piping it directly to the shell is reckless.

I’m not sure how your machine is configured but mine has permission boundaries and security policies that make sure programs are behaving properly. I don’t run everything with my personal user context.

➕ show 2 replies