There's nothing wrong with curl | sudo bash style setups as long as it's over https and the certificate gets checked.
There's nothing wrong with curl | sudo bash style setups as long as it's over https and the certificate gets checked. Even assuming the URL's publisher is trustworthy (which is a poor assumption to make, ever), you forget SSL / HTTPS is broken, that the NSA has established MITM on the entire internet, that your installation process (which should be both versioned and repeatable) now has zero versioning and all the entropy of the network plus bonus entropy.
Posted by contingencies on Apr 23, 2015, 5:26 AM
Tags
Related issues
- I can't recall who said it, but "The biggest problem with golden ages is that you never realize you're in one until it's over".
- [BUG] No response from API error when Advisor is triggered
- I thought the general premise is that humans can't form social groups bigger than around ~200.
- great, now can we convince the rest of the internet to start adding AAAA records and ipv6 endpoints for things.
- > It's only with the emergence of whiny, persnickety Unix devs who refused to leave the comforting embrace of their editor of choice that...
- Contrary to some other comments: no, IPV6 hasn't taken over the world at all.
Raise real-world problems, find people facing the same issue, and discuss solutions.7,000 issues0 comments
reliability (Network)
I can't recall who said it, but "The biggest problem with golden ages is that you never realize you're in one until it's over".
[BUG] No response from API error when Advisor is triggered
I thought the general premise is that humans can't form social groups bigger than around ~200.
great, now can we convince the rest of the internet to start adding AAAA records and ipv6 endpoints for things.
> It's only with the emergence of whiny, persnickety Unix devs who refused to leave the comforting embrace of their editor of choice that...
Contrary to some other comments: no, IPV6 hasn't taken over the world at all.
Copy and paste not working
Full Offline Support
There's nothing wrong with curl | sudo bash style setups as long as it's over https and the certificate gets checked.
There's nothing wrong with curl | sudo bash style setups as long as it's over https and the certificate gets checked. Even assuming the URL's publisher is trustworthy (which is a poor assumption to make, ever), you forget SSL / HTTPS is broken, that the NSA has established MITM on the entire internet, that your installation process (which should be both versioned and repeatable) now has zero versioning and all the entropy of the network plus bonus entropy.
Comments (0)
No comments yet. Start the discussion.