14 ms·
I feel like curl|bash is for the masses, who don't care. Then there are more secure options for those who do care.
by tokenizerrr 11y ago
I feel like curl|bash is for the masses, who don't care. Then there are more secure options for those who do care.
- snowwrestler 11y agoI think that once we're talking about installing server software at the command line, we're already beyond most of the masses. I'd also argue that secure defaults are most important for folks who don't care. And there are more secure options: the package managers.
- tokenizerrr 11y agoDon't forget about workstations, but you're right. Though personally I install a lot of stuff on one-off VMs to try it out. I don't really care about security there because the VM is in an isolated network and will be erased an hour later anyway.
- zokier 11y ago> And there are more secure options: the package managers. So sandstorms installation guide should in your opinion just say "wait a couple of years and maybe someone will have packaged it for your distro"? Yes, that sounds excellent way of getting users. And hey, the most secure way of installing software is not to!
- throwaway2048 11y agoyou can host your own repos pretty easily, and still provide the bash script for oddball distros.
- lmm 11y agoI don't think it's possible to make things secure for people who don't care, except by disallowing third-party software entirely. Deciding who you trust is fundamental.