4 ms·

Don't run random scripts basically, always check their content. Specially if they require root.

• astrodust 9y ago
  Welp, there goes Rubygems and NPM global modules.
  • zurn 9y ago
    Always wall off your dev/admin machine and all the credentials therein. Sandbox NPM type things using a VM or at least a non-root container.
  • chocolateboy 9y ago
    Neither requires root: * https://github.com/creationix/nvm https://github.com/creationix/nvm * http://kazhack.org/?post/2014/12/11/npm-install-g-without-sudo http://kazhack.org/?post/2014/12/11/npm-install-g-without-su... * http://kazhack.org/?post/2014/12/12/pip-gem-install-without-sudo http://kazhack.org/?post/2014/12/12/pip-gem-install-without-...
    • astrodust 9y ago
      You can do it without root if you take precautions, but the default is to use root.
      • chocolateboy 9y ago
        Depends on the system. The default on Arch Linux is local gem installs: $ cat /etc/gemrc # --user-install is used to install to $HOME/.gem/ by default since we want to separate # pacman installed gems and gem installed gems gem: --user-install
        • astrodust 9y ago
          That's a nice touch and some good work on the part of the package maintainer. Most (Ubuntu, RedHat, etc.) do not, they just expect you to sudo everything.
  • deleted 9y ago
    [deleted]