3 ms·
It's "gratuitously negative" to ask me to pipe a script I download from the Internet into bash directly. They really should, for security reasons, spend the 5
by dimino 11y ago
It's "gratuitously negative" to ask me to pipe a script I download from the Internet into bash directly.
They really should, for security reasons, spend the 5 seconds it'd take to separate those into two commands, or come up with a better way to do things (which would probably take more than 5 or 30 seconds).
Reminds me of pip (python packaging manager), who will, almost narcissistically, remind you about how important it is to use secure connections for python repos, and in fact will refuse to run without a bevy of flags set explicitly allowing any kind of insecure or unverified package, but first ask you to download and run a python script with an embedded binary, because that's the only way they could think of to get bootstrapping working.
- quesera 11y agoOh, believe me I know all about it. But drive-by potshots at other peoples' impressive work is gratuitously negative. Why not nitpick the copy editing, while we're here? Pipe to shell grinds my gears. At the very minimum, it should be replaced with `curl -o https://hyper.sh/install https://hyper.sh/install && bash install`, to at least validate that curl believes the http request returned OK. Realistically, that's no different from how all software everywhere is installed until/unless it's incorporated into a previously-trusted package manager repository.
- Gigablah 11y ago"Separate those into two commands"? That's it? Really? This just screams "cargo cult".
- icebraining 11y agoNot really. By separating the two commands and using && between the two, you ensure the script will download successfully before executing, instead of potentially leaving you with the software half-installed.