Remix.run Logo
▲ luma 2 hours ago

Any code I didn't write is arbitrary code. At some point I'm left to trust someone or run no software at all.

▲mulmen an hour ago | parent [-]

It’s a shell script. You can download and read it before you run it. Piping it directly to the shell is reckless.

I’m not sure how your machine is configured but mine has permission boundaries and security policies that make sure programs are behaving properly. I don’t run everything with my personal user context.

▲bornfreddy 12 minutes ago | parent | next [-]

Actually... Server can detect if you are piping or not and serve a modified version for inspection.

But really, there is no reason not to use prebuilt packages for distribution. Curlpiping needs to die.

▲mynameisvlad 19 minutes ago | parent | prev [-]

So then... Just do that and it's no longer reckless.

If someone wants to be reckless they can be. If someone doesn't, they also have that ability.