3 ms·
For a "modern" programmer a .sh file hosted in some random webserver which you tell him to wget and run would be best.
by AshamedCaptain 9mo ago
For a "modern" programmer a .sh file hosted in some random webserver which you tell him to wget and run would be best.
- OoooooooO 9mo agosudo run "some link to a shell script" Never understood why that became so common place ...
- SAI_Peregrinus 9mo agoStick the script in a. deb & tell 'em to use dpkg, much less suspicious.
- crotobloste 9mo agoBut people check shell scripts before running them... right?
- u8080 9mo agoAs well as .debs and other
- LoveMortuus 9mo agoI don't... I just tell myself that if anything bad happens I can always just format the computer and start anew.
- cbarrick 9mo agoIt's not really different than downloading a .msi or .exe installer on Windows and running it. Or downloading a .pkg installer on macOS and running it (or running a program supplied in a .dmg). Or downloading a .deb or .rpm on Linux and running it. It's all whether or not you trust the entity supplying the installer, be it your package manager or a third party. At least with shell scripts, you have the opportunity to read it first if you want to.
- LoganDark 9mo agoIt is different: you give it sudo immediately so it doesn't have to ask. Of course, many installers ask for administrator access anyway...
- cbarrick 9mo agoI don't think it's functionally different if you write sudo on the command line or if the installer uses sudo in the script. As you said, most installers need to place binaries in privileged locations anyway.
- BobBagwill 9mo agoBecause everyone uses airgapped disposable micro VM's for everything, right? No one would be stupid or lazy enough to run them on their development laptop or production server, right? Right!?! Maybe the good side-effect of LLM's will be to standardize better hygiene and put a nail in the coffin of using full-fat kitchen sink OS images for everything.
- TeMPOraL 9mo agoNo, of course every reasonable developer works with a bag full of disposable e-vapes, each one used to run a single command on and then thrown into a portable furnace.
- 4gotunameagain 9mo agoShots fired ! I wish you were wrong.
- ffsm8 9mo agoModern? It's been over a decade since this became a norm... And 10 years since https://news.ycombinator.com/item?id=17636032 https://news.ycombinator.com/item?id=17636032 The link sadly seems to be dead though
- cortesoft 9mo agoI consider a decade ago modern
- bonoboTP 9mo agoCurl|bash isn't any less safe than installing from random a ppa, or a random npm or pip package. Or a random browser extension or anything. The problem is the random, not the shell script. If you don't trust it, don't install it. Also thinking that sudo is the big danger nowadays is also a red herring. Your personal files getting stolen or encrypted by ransomware is often worse than having to reinstall the OS.