<![CDATA[Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ?]]>Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? πŸ˜” Just pipe the random commands into your shell with sudo added to the mix. What could possibly go wrong? πŸ˜‘

]]>https://forum.fedi.dk/topic/e2cfb371-62a6-4060-a805-26ade84d0cfb/visit-homebrew-rustup-oh-my-zsh-nvm-and-few-other-popular-open-source-projects-website-and-you-realise-that-quietly-curl-fssl-has-become-the-most-popular-package-manager-for-linux-and-unix-users-how-did-we-get-hereRSS for NodeFri, 23 Oct 2026 22:36:18 GMTTue, 22 Sep 2026 02:09:46 GMT60<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Thu, 08 Oct 2026 14:38:18 GMT]]>@levrden
i see your point. it would've made more sense to make fun of the β€’developersβ€’ than the β€’usersβ€’ because it's the developers who
put curl|sh on their websites.
@nixCraft

]]>https://forum.fedi.dk/post/https://veganism.social/users/pelle/statuses/117405797495736556https://forum.fedi.dk/post/https://veganism.social/users/pelle/statuses/117405797495736556Thu, 08 Oct 2026 14:38:18 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Thu, 08 Oct 2026 14:34:36 GMT]]>@pelle @nixCraft sorry my English reading brain wasn't fully started when I rode your comment
Yes of course it is okay even recommended to make fun of the businesses 🩷

]]>https://forum.fedi.dk/post/https://mastodon.social/users/levrden/statuses/117405782935843774https://forum.fedi.dk/post/https://mastodon.social/users/levrden/statuses/117405782935843774Thu, 08 Oct 2026 14:34:36 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Thu, 08 Oct 2026 14:10:42 GMT]]>@pelle @nixCraft I got this, but the linux commands are so unclear when you're a beginner and want to try linux, it's not really clear how it is unsafe, as non tech people doesn't identify theses practices easily

]]>https://forum.fedi.dk/post/https://mastodon.social/users/levrden/statuses/117405688970051969https://forum.fedi.dk/post/https://mastodon.social/users/levrden/statuses/117405688970051969Thu, 08 Oct 2026 14:10:42 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Thu, 08 Oct 2026 13:57:27 GMT]]>@levrden
you go to the furniture shop to buy a sofa. the sales assistant tells you that the recommended way to install the sofa in your home is if you make a copy of your door key and give that to her. πŸ›‹οΈπŸ”‘

everyone does this, and soon you've given out a dozen copies of your front door key to everyone including the pizza delivery driver. one morning you wake up your socks and your credit card are missing. πŸ§¦πŸ’³

yes, no one should make fun the victim of such theft. but isn't it okay to mock the businesses who put their customers at risk by asking all of them for their door keys? 🀑
@nixCraft

]]>https://forum.fedi.dk/post/https://veganism.social/users/pelle/statuses/117405636886409016https://forum.fedi.dk/post/https://veganism.social/users/pelle/statuses/117405636886409016Thu, 08 Oct 2026 13:57:27 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Thu, 24 Sep 2026 17:16:09 GMT]]>Their trying to say, or just saying what's up to NixCraft. Can't really just say anything on a page, others sees them comments. But I guess there's issue unmentioned, not just what's up all the time.

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/116987333587990100/statuses/117327145861262012https://forum.fedi.dk/post/https://mastodon.social/ap/users/116987333587990100/statuses/117327145861262012Thu, 24 Sep 2026 17:16:09 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Wed, 23 Sep 2026 12:22:49 GMT]]>@nixCraft

]]>https://forum.fedi.dk/post/https://mastodon.ie/users/slaine/statuses/117320330108326379https://forum.fedi.dk/post/https://mastodon.ie/users/slaine/statuses/117320330108326379Wed, 23 Sep 2026 12:22:49 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Wed, 23 Sep 2026 10:39:23 GMT]]>@nixCraft It’s as safe as using npm… 🀦

]]>https://forum.fedi.dk/post/https://mastodon.gamedev.place/users/Taffer/statuses/117319923351842001https://forum.fedi.dk/post/https://mastodon.gamedev.place/users/Taffer/statuses/117319923351842001Wed, 23 Sep 2026 10:39:23 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 20:19:26 GMT]]>@Chris1776 @nixCraft
Does it check signatures ... at least

]]>https://forum.fedi.dk/post/https://privacysafe.social/users/mikalai/statuses/117316541904207704https://forum.fedi.dk/post/https://privacysafe.social/users/mikalai/statuses/117316541904207704Tue, 22 Sep 2026 20:19:26 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 20:17:49 GMT]]>@levrden @nixCraft
Jo. These folks have been talking soooo many times about it. This is their professional, slightly nervous fun.
On practical note, they really don't know how else to pass this ... trivial info, for practical end.
As a member of normal group, may be you can volunteer persvasive words.
Persvaisive for your locale at least.

]]>https://forum.fedi.dk/post/https://privacysafe.social/users/mikalai/statuses/117316535540285692https://forum.fedi.dk/post/https://privacysafe.social/users/mikalai/statuses/117316535540285692Tue, 22 Sep 2026 20:17:49 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 20:11:46 GMT]]>@thatdnaguy @nixCraft
But isn't it convenient in one's CI pipeline? Inside of some container.
.... looking for dictionary definition of supply chain attack...

]]>https://forum.fedi.dk/post/https://privacysafe.social/users/mikalai/statuses/117316511729024238https://forum.fedi.dk/post/https://privacysafe.social/users/mikalai/statuses/117316511729024238Tue, 22 Sep 2026 20:11:46 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 20:10:01 GMT]]>@moelassus @nixCraft
Novice users are too novice to weep 🫣

]]>https://forum.fedi.dk/post/https://privacysafe.social/users/mikalai/statuses/117316504854791311https://forum.fedi.dk/post/https://privacysafe.social/users/mikalai/statuses/117316504854791311Tue, 22 Sep 2026 20:10:01 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 09:26:27 GMT]]>@jbaert @nixCraft It has become indeed quite common that I often don't want to read / check the script once again. Instead I run the curl in a pod and then copy the artifact to my system.

Where did we go wrong? Probably too many different package managers out there and/or too little time to maintain them. Even if they make an rpm /deb pkg, what guarantee you have nothing fishy happens in the postinstall?

]]>https://forum.fedi.dk/post/https://mastodon.social/users/haerench/statuses/117313974247556400https://forum.fedi.dk/post/https://mastodon.social/users/haerench/statuses/117313974247556400Tue, 22 Sep 2026 09:26:27 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 08:44:23 GMT]]>deb.fbxl.net has repos for many many operating systems, but there's exactly one command listed with a universal installer for setting up repos on many of them.

In my case it's because freebasic is a basic compiler, and the goal was to make it easy to install damn near everywhere. The problem is, there's a lot of everywhere. Just on Linux you have debian-based, RPM based, arch-based, slackware based, and within those categories you have a number of different distributions and distribution versions. And then you have Solaris and open solaris, the various bsds, haiku, windows via cygwin or mingw, not to mention MacOS, and that's just the OSes that apply to package managers and she'll scripts. Just making the machinery to produce packages for all those is tough enough, but then you're trying to figure out how to make it easy for OSes to actually just install and be capable of staying up to date afterwards.

More ideal would be getting the packages added to every distro, but that really isn't in the cards, so you're stuck playing the hand you've got.]]>https://forum.fedi.dk/post/https://social.fbxl.net/objects/9fe83764-bc0f-4a08-84fd-7118225b3e2ehttps://forum.fedi.dk/post/https://social.fbxl.net/objects/9fe83764-bc0f-4a08-84fd-7118225b3e2eTue, 22 Sep 2026 08:44:23 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 07:23:58 GMT]]>@nixCraft tired: curl | sudo bash

wired: yes | sudo bash <(curl)

]]>https://forum.fedi.dk/post/https://mendeddrum.org/users/gabe/statuses/117313492646192807https://forum.fedi.dk/post/https://mendeddrum.org/users/gabe/statuses/117313492646192807Tue, 22 Sep 2026 07:23:58 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 05:23:11 GMT]]>@nixCraft it brings some excitement into my otherwise dull life

]]>https://forum.fedi.dk/post/https://mastodon.social/users/chipbarm/statuses/117313017685256901https://forum.fedi.dk/post/https://mastodon.social/users/chipbarm/statuses/117313017685256901Tue, 22 Sep 2026 05:23:11 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 05:13:27 GMT]]>@nixCraft yeah! we should be using aria2c. it's 2026 people come on.

]]>https://forum.fedi.dk/post/https://fedia.social/notes/arfs91jykp5wxc55https://forum.fedi.dk/post/https://fedia.social/notes/arfs91jykp5wxc55Tue, 22 Sep 2026 05:13:27 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 05:02:33 GMT]]>@cogitocomrade @nixCraft It is far less safe. If the first step is secure, then it may be ok to put some trust in the code you run later. But with curl | this is unfounded.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/uecker/statuses/117312936581278112https://forum.fedi.dk/post/https://mastodon.social/users/uecker/statuses/117312936581278112Tue, 22 Sep 2026 05:02:33 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 04:54:03 GMT]]>@nixCraft cargo install is just as bad

]]>https://forum.fedi.dk/post/https://mastodon.bsd.cafe/users/Chris1776/statuses/117312903146142281https://forum.fedi.dk/post/https://mastodon.bsd.cafe/users/Chris1776/statuses/117312903146142281Tue, 22 Sep 2026 04:54:03 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 04:39:35 GMT]]>@nixCraft curl is nice. Im already running some arbitrary code I haven’t read when using any of these packages, so running a script by them doesn’t seem that much less safe

]]>https://forum.fedi.dk/post/https://mastodon.social/ap/users/117086817481985793/statuses/117312846246624336https://forum.fedi.dk/post/https://mastodon.social/ap/users/117086817481985793/statuses/117312846246624336Tue, 22 Sep 2026 04:39:35 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 04:02:32 GMT]]>@nixCraft now add a sudo-allowed ai agent to the mix πŸ™‚

]]>https://forum.fedi.dk/post/https://fosstodon.org/users/squalouJenkins/statuses/117312700595457089https://forum.fedi.dk/post/https://fosstodon.org/users/squalouJenkins/statuses/117312700595457089Tue, 22 Sep 2026 04:02:32 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 03:42:51 GMT]]>@nixCraft i hate it when that's the only option. I often try to read the script itself and it's an obtuse mess.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/jbaert/statuses/117312623190378281https://forum.fedi.dk/post/https://mastodon.social/users/jbaert/statuses/117312623190378281Tue, 22 Sep 2026 03:42:51 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 02:58:31 GMT]]>@nixCraft wouldn't it be even better to explain clearly instead of making fun of people?

]]>https://forum.fedi.dk/post/https://mastodon.social/users/levrden/statuses/117312448844123943https://forum.fedi.dk/post/https://mastodon.social/users/levrden/statuses/117312448844123943Tue, 22 Sep 2026 02:58:31 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 02:55:01 GMT]]>@nixCraft the first time I saw some of those instructions, I thought it was the hack way of doing it without a package manager. Then I realized it was THE way and was completely shocked.

]]>https://forum.fedi.dk/post/https://genomic.social/users/thatdnaguy/statuses/117312435120322270https://forum.fedi.dk/post/https://genomic.social/users/thatdnaguy/statuses/117312435120322270Tue, 22 Sep 2026 02:55:01 GMT<![CDATA[Reply to Visit Homebrew, Rustup, Oh My Zsh, nvm and few other popular open source projects website and you realise that quietly `curl -fsSL` has become the most popular package manager for Linux and Unix users πŸ˜‚ How did we get here ? on Tue, 22 Sep 2026 02:54:30 GMT]]>@nixCraft sat through an Amazon-guided AWS lab where one of the steps entailed installing something by piping curl through sudo. I was dumbfounded that they were encouraging/normalizing this.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/EdCates/statuses/117312433085488133https://forum.fedi.dk/post/https://mastodon.social/users/EdCates/statuses/117312433085488133Tue, 22 Sep 2026 02:54:30 GMT