4 ms·
I think that telling users to execute a shell command to install software is not the smartest idea in any case (eg. no way to verify signatures of installed sof
by jakobegger 7y ago
I think that telling users to execute a shell command to install software is not the smartest idea in any case (eg. no way to verify signatures of installed software)
A standard installer package would be much better.
- hk__2 7y ago> I think that telling users to execute a shell command to install software is not the smartest idea in any case (eg. no way to verify signatures of installed software) Installing via a shell command has nothing to do with the (in)ability to verify signatures. You aren’t more protected running a random installer package than an auditable shell script from the official Homebrew repo. Also, Homebrew supports more installation methods including cloning the git repo by yourself or un-taring an archive.
- jakobegger 7y agoInstallers are signed, scripts piped from curl to ruby are not. Homebrew circumvents all the protections built into macOS (like Gatekeeper / Xprotect etc) for convenience. I don't think this method for distributing software has much of a future.