On Monday, 9 November 2015 at 23:13:03 UTC, H. S. Teoh wrote:
On Mon, Nov 09, 2015 at 06:07:57PM -0500, Andrei Alexandrescu
via Digitalmars-d wrote:
Rust has a nice way to download at
https://www.rust-lang.org/downloads.html for Posix:
$ curl -sSf https://static.rust-lang.org/rustup.sh | sh -s --
The method is simple and transparent. An optional
--channel=beta or --channel=nightly parameter chooses between
a stable release (default), beta, or nightly build.
Should we do something similar?
[...]
Probably...
... though I have to admit that the idea of running a shell
script downloaded from some random remote server (and that, as
root, as otherwise it probably wouldn't work) scares me. A lot.
T
I found this article compelling about this subject:
https://blog.sandstorm.io/news/2015-09-24-is-curl-bash-insecure-pgp-verified-install.html
