Switching from pyenv, rbenv, goenv and nvm to asdf

Re:Switching from pyenv, rbenv, goenv and nvm to asdf by d110af5ccf on Wednesday April 06, 2022 @02:19AM (#30929007)

Presumably you trust the authors or you wouldn't be downloading it to begin with. The primary concern isn't "what if the authors are out to get me" it's "what if someone impersonates or compromises the authors".

[ Parent | on HN ]

Re:Switching from pyenv, rbenv, goenv and nvm to asdf by jjgreen on Wednesday April 06, 2022 @04:19AM (#30929732)

Indeed, and this can be done semi-covertly given that one can detect a "curl install" server-side [1] and serve-up hostile code in just that case

[1] https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...

[ Parent | on HN ]

Re:Switching from pyenv, rbenv, goenv and nvm to asdf by leaflets2 on Saturday April 09, 2022 @03:45PM (#30971344)

Thanks! Interesting (the cURL stuff)

[ Parent | on HN ]