7 ms·
What difference does it make if you run `make install` or `curl | bash`? In both cases, you are running code you have not audited yourself. Or are you the kind
by yori 7y ago
What difference does it make if you run `make install` or `curl | bash`? In both cases, you are running code you have not audited yourself. Or are you the kind who inspects every Makefile and installer script before installing? If not, why is one better than the other?
- sudosysgen 7y agoBecause at least with make install you can have some trust in the delivery method, ie encrypted git or whatever. If you use just plain http....
- yori 7y agoSo wget https://example.com/installer.tar.gz; https://example.com/installer.tar.gz; tar -xvzf installer.tar.gz; cd installer; make install is okay for you? But curl https://example.com/installer.sh https://example.com/installer.sh | bash is not? Why?
- sudosysgen 7y agoI'm fine with the second too as long as the host is trustworthy and it's always https. Most of the time it isn't.