4 ms·
Given that piping curl in bash with sudo is considered acceptable, this is not surprising
by nimish 10y ago
Given that piping curl in bash with sudo is considered acceptable, this is not surprising
- digi_owl 10y agoOutside of architecture astronautical web development (usually done on a Mac while sipping some kind of coffee and milk blend) no it is not acceptable one bit.
- hawski 10y agoYeah, instead it's much more secure one-liner: $ wget http://example.com/foo.tgz && tar xf foo.tgz && cd foo && ./configure && make && sudo make install
- Accacin 10y agoI mean, even to install Rust they give you a command to do this. So no, it's not just web dev.
- digi_owl 10y agoWell Rust is a Mozilla creation, and Mozilla is first and foremost a web company...
- kalleboo 10y agoBecause the Windows method of downloading and double-clicking a binary is so much better?
- kevingadd 10y agoA random exe file you download won't be running through sudo, you'll see elevation requests. The elevation request is ~very spooky~ unless the exe is codesigned by a reputable certificate issuer. W10 turns the whole screen red and sometimes warns you that the exe itself is actively unsafe. Of course, end users will just click OK on the elevation request, but regardless, it's not a fair comparison. Downloading random exes off the internet is more like 'curl | bash' ('still bad' level) than 'curl | bash | sudo' ('are you insane?' classification)
- kalleboo 10y agoSo is your objection just that sudo isn't scary enough?
- astrobe_ 10y agoNo, his objection is something like "I'm a poweruser. I can shoot myself in the foot, please neuter me." To elaborate a bit: most of the times, you don't have to sudo-install. If you're someone savvy enough to use a command line and understand these commands (if you enter them without this knowledge you're just plain stupid and nothing will save you), then there's no problem: you are the firewall, and you apply the level of caution appropriate for how much you thrust your source.