4 ms·
The 'curl | sudo bash' mention reminds me of OS X Homebrew. The one-liner installation script is still published in the home page front and center (though it's
by devy 11y ago
The 'curl | sudo bash' mention reminds me of OS X Homebrew. The one-liner installation script is still published in the home page front and center (though it's running from a trusted source Github).
http://brew.sh/ http://brew.sh/
One might argue that that easy of oneliner installer script is exactly what make Homebrew gains popularity. And dev machine is different from production environment in terms installation packages. Still, I agree that proper container management in local network and perhaps new security features from upstream container vendors would help the situation.
- squar1sm 11y agoI agree, I think accessibility made it popular. Security and ease of use are usually opposing forces. The article has some interesting discussion points. I don't understand the absolute fear of | bash installers. It's open source, read the script. That's the argument people make for `./configure; make; make install` programs. I think it's because it's new, or it's too easy. But the article does have a point about trusted containers. But security isn't a download or a product anyway. Security isn't even guaranteed.