mastodon.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
The original server operated by the Mastodon gGmbH non-profit

Administered by:

Server stats:

381K
active users

nixCraft 🐧

Computer Science is installing random packages or package manager because accepted forum answer told you it's your only hope. so you do it as the root user:

curl url/script.sh | bash

@nixCraft
Cynicism is appropriate, but "computer science" is the wrong term. "Computer pragmatics", perhaps.

But it gives me the heebie-jeebies to see "curl url/script.sh | bash"!

@nixCraft you know could also open the url and look into the script before you exec it as root ;3

@Kuraiko @nixCraft but guess what the script does? It probably downloads a binary from a server and executes it. :-)

@Kuraiko @nixCraft You could also download it using wget read through it using your text editor and if all is fine chmod it and execute it

@nixCraft I disagree. You're describing IT work, not CS. However I agree with the fact that quite a few computer scientists wouldn't care and do everything as root (not even sudo, I do mean *root*). 😬

@nixCraft
Your command didn't work for me. Even when I tried to sudo it.

@nixCraft don't share this toot, otherwise your colleague will setup a Webserver named "url" tomorrow...

@nixCraft Since I always use fresh containers for everything, that's fine for me.

@nixCraft Wisdom is packaging stuff you want to use when it's missing on your distro repositories and submitting it to your distro.

@nixCraft I know it looks worse but there is not really a difference to downloading a binary and running it manually. Realistically nobody is inspecting what they downloaded.

@lx @nixCraft
It's the difference between pretending to care a little bit versus demonstrating no clues nor cares whatsoever. :)

@dougmerritt @nixCraft I mean somebody checked before they signed the repo, right? 👀

@lx @nixCraft
Of course!

It's like when the U.S. added "In God We Trust" in 1956 (and then claimed it had always been there).

If you can't trust signed repos, what *can* you trust?

en.wikipedia.org/wiki/In_God_W

en.wikipedia.orgIn God We Trust - Wikipedia