News for hackers. Stuff that matters.
Re:Bash 5.0 released by gnulinux on Tuesday January 08, 2019 @12:35AM (#18853470)
That command makes my eyes twitch. This sort of "download random stuff from internet, then pipe them to ruby/perl/python" madness should end, like right now. I'm assuming you're a reasonable person who knows what that commands does. Can you really not see how people can misuse commands like this to execute arbitrary code on people's computers, even experienced engineers if they carelessly copy-paste code like this. As a rule of thumb, to whoever reading this, please don't trust random strangers online and run their code. You never know. Always download code from trusted sources and check sha hashes. Piping anything else to ruby/perl/python is playing with fire.
Re:Bash 5.0 released by shpx on Tuesday January 08, 2019 @01:13AM (#18853659)
That command curls a ruby file from the Homebrew repository on Github. If that Github repo (or Github) is compromised, then no matter how you installed homebrew, you are going to get hacked the next time you run `brew update`, which by default is run on every `brew install`.

For me, the odds of that repo being compromised for long enough are outweighed by the convenience. This has been brought up on HN before and I'm not convinced.

Re:Bash 5.0 released by aaaaaaaaaab on Thursday January 17, 2019 @05:36PM (#18935332)
Would you notice if that URL was “raw.githubusercontent.someotherdomain.com” instead of “raw.githubusercontent.com”?

I’m pretty sure at least 50% would merrily copy & paste it in their shell.

Re:Bash 5.0 released by nomel on Tuesday January 08, 2019 @12:42AM (#18853506)
Alternatively, follow the homebrew installation instructions: https://docs.brew.sh/Installation