On the curl | sh pattern(blog.emillon.org)
blog.emillon.org
On the curl | sh pattern
http://blog.emillon.org/posts/2014-12-27-on-the-curl-sh-pattern.html
6 comments
RVM, pow, heroku, homebrew... all things I had to deal with as a Ruby developer. I was shocked at how often it is recommended when I had to set up a new Ruby dev environment on OSX.
Too bad seeing Rust following that trend as well. I was hoping new platforms would evolve past that
Too bad seeing Rust following that trend as well. I was hoping new platforms would evolve past that
Rust doesn't do it, Cargo does. And it's only doing it until Rust reaches 1.0, by which time there will be a proper bundled Rust+Cargo installer. And it's downloading over HTTPS without disabling the certificate check, which is the least egregious form of this (and frankly, if you can't trust that your TLS sessions aren't being hijacked you have a bigger problem).
https://get.docker.com/ does this too. Though I feel like they do a much better job than Adobe, when I download Flash from http and don't know what the installer does.
[1] http://www.seancassidy.me/dont-pipe-to-your-shell.html
[2] http://www.djm.org.uk/protect-yourself-from-non-obvious-dang...