lua-users home
lua-l archive

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]


Andrew, I'm sorry you had a hard time.  There is a top-level link on the very blog post you were reading labeled "install" and if you go to the home page of luvit.io there is a huge install button linking to the same.  The install page explains how to install lit and how to build luvit from that.

Peter, I don't see how piping a shell script to sh is any worse than downloading unsigned binaries and running them.  If anything this is safer because anyone who is paranoid can simply do the curl and sh in two steps and read the script in between to verify what it's doing. With binaries this is considerably more difficult.  (Also this is just bootstrap to download the right binaries anyway)

On Fri, Apr 29, 2016 at 6:10 AM, Peter Aronoff <telemachus@arpinum.org> wrote:
On Thursday, April 28, 2016 at 11:50PM, Andrew Starks wrote:
> To install lit, the magic line for OSX is :
>
> curl -L https://github.com/luvit/lit/raw/master/get-lit.sh | sh

I know that there are lots of things to worry about in life, but we should
all stop writing apps that do this, stop recommending it, and stop
following such instructions. It's begging for pain.

https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/

--
We have not been faced with the need to satisfy someone else's
requirements, and for this freedom we are grateful.
    Dennis Ritchie and Ken Thompson, The UNIX Time-Sharing System