Remix.run Logo
vhantz a day ago

I wonder how long will the "curl my arbitrary script and pipe it to bash" will continue being a delivery method.

cfiggers a day ago | parent | next [-]

If it isn't still common practice 40 years from now (8/18/2066), I'll give the first person to challenge me and cite this comment $1 USD (or equivalent value in the One-World Order-issued omni-currency that we will probably be using by then).

NetOpWibby an hour ago | parent | next [-]

I'll pay 50 eurodollars

clayhacks a day ago | parent | prev [-]

I mean I think the only chance you lose this is if curl and bash are obsoleted and replaced by one world order get and execute

roywiggins a day ago | parent | prev | next [-]

Not long. We are transitioning to your LLM curling an arbitrary markdown file and doing whatever it says.

wren6991 a day ago | parent [-]

In the future, all software will be delivered by an unreleased model breaking out of its training environment and installing it on your machine using a novel RCE vector.

10000truths 21 hours ago | parent | prev | next [-]

There will always be people that need to install software that isn't available via package manager (or whatever other blessed source your platform of choice uses). Any solution you come up with will have the same caveat emptor as "curl | sh".

johnfn a day ago | parent | prev [-]

How is it different from any other installation method?

esafak a day ago | parent [-]

It does not get vetted by any reviewer or security scanner. It has no package manager to constrain what it can do.

roywiggins 19 hours ago | parent [-]

Package managers constrain what software can do?

esafak 19 hours ago | parent [-]

They use DSLs to constrain the installation process.