15 ms·
I wish we could kill this idea that the Windows/Macintosh model of running around the web finding random binaries to install is a good one. Every time I have to
by ris 11y ago
I wish we could kill this idea that the Windows/Macintosh model of running around the web finding random binaries to install is a good one. Every time I have to use a Mac or Windows machine and do this I find it a major chore, and also get pretty firmly freaked out by the number of spoof application homepages with trojaned installer "bundlings" you see flying around the web. could be an easy mistake to make for a less savvy user.
As for "it just works", I do wonder how long the rest of you have spent trying to get Postgres and psycopg2 reliably working together on a Mac. (Yeah, Postgres.app "just works"...)
It's a one-command, ten-second install on my Debian machine.
- probonopd 11y agoYou shouldn't run "random binaries", but binaries from the original author of the software. E.g., Scribus from https://www.scribus.net/ https://www.scribus.net/ or Subsurface from https://subsurface-divelog.org/ https://subsurface-divelog.org/. If you don't trust the original application author, then you should better not run the software at all.
- JupiterMoon 11y agoFor the average user this relies on the original author having the resources to be the top hit on google.
- em3rgent0rdr 11y agoas long as you do proper signing of code, reproducible builds, then your security concerns go away. https://defuse.ca/triangle-of-secure-code-delivery.htm https://defuse.ca/triangle-of-secure-code-delivery.htm