3 ms·

I don't really understand how a shar is more dangerous than the still-incredibly-common "./configure; make".

• nhaehnle 11y ago
  You really don't need the "./configure" there. make alone can obviously run arbitrary commands - but then again, so can the program whose source code you probably downloaded in order to run it. In general, all the hype about not executing stuff from the web has a point but is largely confused about where the risks are and aren't (e.g. the "don't pipe wget into the shell" meme).
• juhanima 11y ago
  And even without any other source of trust, anyone who is willing to go through the automake/config hell, already scored some initial trust points. I rest my case.