3 ms·

Can anyone tell me if this also applies to brew's cask's builds? I needed to download CentOS the other day and wanted to go with a torrent. I got pretty pissed

Can anyone tell me if this also applies to brew's cask's builds? I needed to download CentOS the other day and wanted to go with a torrent. I got pretty pissed after I realized that BitTorrent installed some adware called Spigot. I tried to remove it as good as possible (I mainly killed the process, removed `Library/Application Support/Spigot` and ran a `sudo find / | grep -i Spigot`). Ironically I decided to use the good, ol', trusted open source alternative transmission because I just read on HN that Transmission gets updated again...

orik 11y ago
My build from cask didn't start the process but force removed it anyways and am waiting for cask room to point towards 2.91.
- Amorymeltzer 11y ago
  homebrew-cask updated with version 2.92 and https
avendael 11y ago
Looks like it. The homebrew cask download url is using http instead of https, which was one of the problems stated in the forum discussion. There's currently an open PR to fix it https://github.com/caskroom/homebrew-cask/pull/19506/files https://github.com/caskroom/homebrew-cask/pull/19506/files.
Amorymeltzer 11y ago
For anybody stumbling upon this, installation via homebrew-cask was _always_ safe[1] thanks to checksum verification. The caskfile has been updated to https[2] and version 2.92[3]. 1: https://github.com/caskroom/homebrew-cask/issues/19504#issuecomment-192992223 https://github.com/caskroom/homebrew-cask/issues/19504#issue... 2: https://github.com/caskroom/homebrew-cask/pull/19506 https://github.com/caskroom/homebrew-cask/pull/19506 3: https://github.com/caskroom/homebrew-cask/pull/19508 https://github.com/caskroom/homebrew-cask/pull/19508