Someone forgot to renew NodeJS.org

Re:Someone forgot to renew NodeJS.org by jaredonline on Saturday September 29, 2012 @12:58PM (#4590121)

Homebrew, rbenv, rvm, to name a few. Never understood it either. If you could get ahold of a domain write a malicious script at /some-script.sh, you could do a lot of damage.

[ Parent | on HN ]

Re:Someone forgot to renew NodeJS.org by halvsjur on Saturday September 29, 2012 @01:07PM (#4590152)

I agree that it feels insecure, but is there really a difference between this and downloading and running files from a .tar.gz or installing a .deb for example?

[ Parent | on HN ]

Re:Someone forgot to renew NodeJS.org by dfc on Saturday September 29, 2012 @01:14PM (#4590175)

Yes.

apt-get:

  $ ls -l /etc/apt/trusted.gpg.d/

Source Installation:

  $ wget http://nmap.org/dist/sigs/nmap-6.01.tgz.asc
  $ wget http://nmap.org/dist/nmap-6.01.tgz
  $ gpg nmap-6.01.tgz.asc

[ Parent | on HN ]

Re:Someone forgot to renew NodeJS.org by willholloway on Saturday September 29, 2012 @01:49PM (#4590273)

This is an important part of why Debian and its derivatives are superior to OS X for web development. If you like Mac hardware like I do, at least run a Linux distro as a virtual machine and save yourself the trouble of Homebrew or its contemporaries.

[ Parent | on HN ]

Re:Someone forgot to renew NodeJS.org by sgt on Saturday September 29, 2012 @01:46PM (#4590270)

The point is that most people don't do this.

[ Parent | on HN ]

Re:Someone forgot to renew NodeJS.org by dfc on Saturday September 29, 2012 @01:55PM (#4590295)

Its built into apt. Unless you are suggesting that most people do:

  # apt-get --allow-unauthenticated ...

[ Parent | on HN ]

Re:Someone forgot to renew NodeJS.org by foobarqux on Saturday September 29, 2012 @01:09PM (#4590159)

debs are authenticated.

[ Parent | on HN ]

Re:Someone forgot to renew NodeJS.org by jaredonline on Saturday September 29, 2012 @01:57PM (#4590306)

With a .tar.gz you can verify a checksum.

[ Parent | on HN ]