2 ms·

I've found all the hate surrounding this practice to be pretty misdirected. As long as it's served over https, it's functionally equivalent to "download and run

by burke 11y ago

I've found all the hate surrounding this practice to be pretty misdirected. As long as it's served over https, it's functionally equivalent to "download and run this random package installer!", which is generally tolerated.

davexunit 11y ago
For the record, I do not tolerate "download and run this random package installer!" either, without GPG signed binaries and corresponding source.
- heroic 11y ago
  I am quite sure RVM now offers a signed download too. https://rvm.io/rvm/security https://rvm.io/rvm/security