2 ms·
Encouraging people to blindly trust something they've never heard of before and curl into a shell to install software does not inspire confidence in a project's
by walrus01 6y ago
Encouraging people to blindly trust something they've never heard of before and curl into a shell to install software does not inspire confidence in a project's security practices.
Your thing is too new to be officially packaged for debian, centos or whatever? Okay fine, at least put up a link with a sha256 signature for the stuff you're distributing, and some instructions on a more traditional method of downloading, verifying, extracting a .tar.bz2 or .tar.xz file, and then installing it.
- dominicl 6y agoYeah we're hoping to be packaged soon. In the meantime the safest way to install the diode cli is to clone the repo http://github.com/diodechain/diode_client http://github.com/diodechain/diode_client and build it yourself. Point taken on the checksums, we will add those