3 ms·
> Thank god for tauri I’d love to try it, but speaking of security, this was the first thing I saw: sh <(curl https://create.tauri.app/sh https://create.tauri
by codazoda 1y ago
> Thank god for tauri
I’d love to try it, but speaking of security, this was the first thing I saw:
sh <(curl https://create.tauri.app/sh https://create.tauri.app/sh)
- edoceo 1y agoRight. But you know how to fetch and inspect (yea?) so, I with you that piping random crap to sh is bad. Maybe these snips encourage that behavior. Tauri is trustable (for some loose definition) and the pipe to shell is just a well known happy-path. All that to say it's a low value smell test. Also, I'm in the camp that would rather git clone and then docker up. My understanding is it gives me a littl more sandbox.
- skydhash 1y agoI think I would prefer to see official supports for major package managers, even with unofficial repos (Debian, Macports,...). We went from a time where software were usually tarballed to one where devs are encouraging piping to shell.
- CuriouslyC 1y agohttps://snapcraft.io/obsidian https://snapcraft.io/obsidian