5 ms·
That's not the only thing you have to trust. http://ariya.ofilabs.com/2016/05/nix-as-os-x-package-manager.html http://ariya.ofilabs.com/2016/05/nix-as-os-x-pac
by regularfry 10y ago
That's not the only thing you have to trust.
http://ariya.ofilabs.com/2016/05/nix-as-os-x-package-manager.html http://ariya.ofilabs.com/2016/05/nix-as-os-x-package-manager... is served over HTTP. Saying "Copy and paste this `curl | sh` command" allows this attack: http://thejh.net/misc/website-terminal-copy-paste http://thejh.net/misc/website-terminal-copy-paste