4 ms·
rustup is still executable code you are downloading from the Rust Project. It then downloads Cargo and rustc, which are both executable code, downloaded via the
by steveklabnik 4y ago
rustup is still executable code you are downloading from the Rust Project. It then downloads Cargo and rustc, which are both executable code, downloaded via the Rust project.
The only difference here is that you’re running a few commands by hand instead of running them in a single invocation of a shell script.
- Arnavion 4y agoYeah, the only thing this achieves is not having to worry about the `curl | sh` step. The rest of the threat model is exactly the same.
- IshKebab 4y agoOf course; I was being sarcastic.
- steveklabnik 4y agoPoe’s law strikes again, my bad!