zlacker

If you're copying curl|sh from webpages you're already not paying attention and domain doesn't matter

>>Punchy+(OP)
It is literally the method given to install a number of products. The first mechanism given as a fix, of sorts, is to install something via brew.

Brew is installed by copying a command line-

https://brew.sh

I mean, I guess you could retype it, but there is no intention for anyone to do that.

>>llm_ne+z1
While true, then I'd just skip installing these products and find another way. And if this is the only way and the product is important (say, brew), make an exception.

>>llm_ne+z1
I think Homebrew still makes a mess with permissions on multiuser systems (at least on macOS), so it's probably not a good example of best practices.

>>steve1+fz
I'm not holding it as a best practice, and I don't see how that was interpreted from my comment. I think installation through a copy/pasted script is terrible business.

But it was held as something exceptional, when here in reality a number of extremely widely used products, frameworks and tools provide installation through a curled shell script command.

Another example is CUDA on Linux. Installed via some copy/pasted scripts from a webpage.

>>llm_ne+tV
I have must misunderstood or misinterpreted your comment a bit then.

I fully agree, this seems to be becoming more and more common unfortunately.

>>Punchy+(OP)
If you download and run an MSI, or deb,(which probably requests root, and runs arbitrary scripts you can't easily examine) then you're not paying attention and nothing matters