Re: `curl | sh` (was Re: [ann] Blog post on Luvit without Luvit)

[Tim Caswell <tim@...>]

For what it's worth, I polled my twitter followers and got some interesting feedback https://twitter.com/maceskridge/status/728265939507159041

I'm going to look deeper into supporting homebrew , dpkg, rpm, etc in my projects.  It's a royal pain for me, but it's much more convenient and secure for people already using these systems.  Also it does appear that people feel more comfortable downloading a binary (I can add hash sums on the website if people bother to verify).

Thanks for the feedback.  I'll see if I can move away from curl-pipe-bash.  It was the winner in the poll, but the comments showed I was missing some much better alternatives.

On Thu, May 5, 2016 at 4:20 PM, Jonathan Goble <jcgoble3@gmail.com> wrote:

On Thu, May 5, 2016 at 3:20 PM, Peter Aronoff <telemachus@arpinum.org> wrote:
> For me, the convenience of `curl | sh` is very real, but it trains people
> in bad habits. I worry that someone will take advantage of that habituation
> and potentially do a lot of damage.

Even worse, you could get rickrolled: https://github.com/keroserene/rickrollrc

:-)