News for hackers. Stuff that matters.
Re:OSX password script for everyone to know by tomwalsham on Friday September 14, 2012 @12:42AM (#4520106)
A nice visible reason why the Rails/Node/OSX FOSS community really need to stop doing the following sort of thing for their installations (seen most recently on yeoman.io, but common to get.pow.cx, npm...)::

curl get.totallytrustworthyapp.io | bash

The above examples are obviously legit, but encouraging this kind of lazy access to even local privileges from arbitrary remote scripts (and Yeoman even asks for sudo in a super-friendly way), is the modern equivalent of padlock.gif on your payment page - training poor security practices.

Re:OSX password script for everyone to know by blake8086 on Friday September 14, 2012 @01:02AM (#4520148)
You're still ultimately going to be running some code without reading all of it first, aren't you?