3 ms·
I wonder how long will the "curl my arbitrary script and pipe it to bash" will continue being a delivery method.
by vhantz 1mo ago
I wonder how long will the "curl my arbitrary script and pipe it to bash" will continue being a delivery method.
- roywiggins 1mo agoNot long. We are transitioning to your LLM curling an arbitrary markdown file and doing whatever it says.
- wren6991 1mo agoIn the future, all software will be delivered by an unreleased model breaking out of its training environment and installing it on your machine using a novel RCE vector.
- cfiggers 1mo agoIf it isn't still common practice 40 years from now (8/18/2066), I'll give the first person to challenge me and cite this comment $1 USD (or equivalent value in the One-World Order-issued omni-currency that we will probably be using by then).
- clayhacks 1mo agoI mean I think the only chance you lose this is if curl and bash are obsoleted and replaced by one world order get and execute
- NetOpWibby 1mo agoI'll pay 50 eurodollars
- johnfn 1mo agoHow is it different from any other installation method?
- esafak 1mo agoIt does not get vetted by any reviewer or security scanner. It has no package manager to constrain what it can do.
- roywiggins 1mo agoPackage managers constrain what software can do?
- esafak 1mo agoThey use DSLs to constrain the installation process.
- 10000truths 1mo agoThere will always be people that need to install software that isn't available via package manager (or whatever other blessed source your platform of choice uses). Any solution you come up with will have the same caveat emptor as "curl | sh".