Elektrine lite

← Feed

@nixCraft@mastodon.social

2026-09-22 02:09 UTC

Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users 😂 How did we get here ? 😔 Just pipe the random commands into your shell with sudo added to the mix. What could possibly go wrong? 😑

Replies (15)

  • @EdCates@mastodon.social 2026-09-22 02:54

    @nixCraft@mastodon.social sat through an Amazon-guided AWS lab where one of the steps entailed installing something by piping curl through sudo. I was dumbfounded that they were encouraging/normalizing this.

    Open ##4800255

  • @levrden@mastodon.social 2026-09-22 02:58

    @nixCraft@mastodon.social wouldn't it be even better to explain clearly instead of making fun of people?

    Open ##4800294

  • @nixCraft@mastodon.social curl is nice. Im already running some arbitrary code I haven’t read when using any of these packages, so running a script by them doesn’t seem that much less safe :thinkhappy:

    Open ##4801100

  • @chipbarm@mastodon.social 2026-09-22 05:23

    @nixCraft@mastodon.social it brings some excitement into my otherwise dull life

    Open ##4801673

  • @Marcialm32@mastodon.social 2026-09-24 17:16

    Their trying to say, or just saying what's up to NixCraft. Can't really just say anything on a page, others sees them comments. But I guess there's issue unmentioned, not just what's up all the time.

    Open ##4834165

  • @dqp@mastodon.social 2026-09-27 01:25

    @nixCraft@mastodon.social install clumsy blobs, replace content and environment.

    Open ##4863993

  • @xfavatax@haunted.computer 2026-09-22 02:17

    @nixCraft@mastodon.social Exactly why I have witnessed high level engineers fall for ClickFix attacks. Everyone is numb to "copy, paste, execute" as the default.

    Open ##5135664

  • @nixCraft@mastodon.social Monkey's Paw Package Manager

    Open ##5135668

  • @thatdnaguy@genomic.social 2026-09-22 02:55

    @nixCraft@mastodon.social the first time I saw some of those instructions, I thought it was the hack way of doing it without a package manager. Then I realized it was THE way and was completely shocked.

    Open ##5135669

  • @nixCraft@mastodon.social now add a sudo-allowed ai agent to the mix :)

    Open ##5135678

  • @Chris1776@mastodon.bsd.cafe 2026-09-22 04:54

    @nixCraft@mastodon.social cargo install is just as bad

    Open ##5135680

  • @nullpotential@fedia.social 2026-09-22 05:13

    @nixCraft@mastodon.social yeah! we should be using aria2c. it's 2026 people come on.

    Open ##5135682

  • @sj_zero@social.fbxl.net 2026-09-22 08:44

    I can't say nothing, deb.fbxl.net has repos for many many operating systems, but there's exactly one command listed with a universal installer for setting up repos on many of them. In my case it's because freebasic is a basic compiler, and the goal was to make it easy to install damn near everywhere. The problem is, there's a lot of everywhere. Just on Linux you have debian-based, RPM based, arch-based, slackware based, and within those categories you have a number of different distributions and distribution versions. And then you have Solaris and open solaris, the various bsds, haiku, windows via cygwin or mingw, not to mention MacOS, and that's just the OSes that apply to package managers and she'll scripts. Just making the machinery to produce packages for all those is tough enough, but then you're trying to figure out how to make it easy for OSes to actually just install and be capable of staying up to date afterwards. More ideal would be getting the packages added to every distro, but that really isn't in the cards, so you're stuck playing the hand you've got.

    Open ##5135684

  • @nixCraft@mastodon.social It’s as safe as using npm… 🤦

    Open ##5135685

  • @slaine@mastodon.ie 2026-09-23 12:22

    @nixCraft@mastodon.social

    Open ##5135686