Hacker News Reader

Comment by awda | Hacker News Reader

This includes things that have become commonplace, such as downloading random tarballs off the internet and running "./configure ; make".

Nothing is safe.

View on HN

Or even worse,

    curl http://example.com/install.sh | sh

uhh yeahhhh that is too common, look at github and see how many projects use link-trackers+url-shorteners instead of raw-github-urls.

Damn, made me cringe and lol at the same time.

but... that one-liner makes my rails.node.js.io framework so beautiful and simple...

I don't understand what it is but there is a culture in Ruby/Node to make installation "easy" to the extent that it is dangerous and, worse, offer no documented alternative.

Installing rvm shouldn't add lines to my .zshrc without prompting me. That behavior would be outrageous anywhere else but in Ruby land it's normal.

Reply on news.ycombinator.com