Installer is piping curl into shell
I thought we were past this as a society 😔
this post was submitted on 10 Jul 2024
4 points (100.0% liked)
Linux
52946 readers
817 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 5 years ago
MODERATORS
Not until after you convince these projects to stop using discord
As long as they just use it for their community and don't fucking lock documentation behind discord I don't really care. But this trend has been so annoying. Due to this I'm in so many servers I have to quit a server just to join a new one
It's made in rust, therefore it must be safe!
A curl piped into a shell or some unofficial packages from various distros.
At this point I don't get why these projects are not Flatpak-first.
Flatpak is worse for debugging, development, and reproducibility.
Its good for user friendly sandboxing, portability, and convenience.
Flatpaks are reproducible https://ranfdev.com/blog/flatpak-builds-are-not-reproducible/
You see the conclusion of that article is that flatpaks are not repeoducible after presenting solutions to make it reproducible right?
@ParetoOptimalDev @GravitySpoiled Tusky 25.2
Device:
Fairphone FP4
Android-Version: 11
SDK-Version: 30
Account:
@carrabelloy
Version: 4.2.10
There ought to be a rule that posts about software releases have to say what it is.
My bad, it's up now
https://github.com/zed-industries/zed/issues/7054#issuecomment-1916315391
They auto download binaries, even proprietary ones, unsigned and without user interaction.
YEAH security!
So they're doing the equivalent of VSCode(ium)'s extensions, but installing them automatically and not giving you the option to use alternatives?
Blegh.
Quoting the guy:
"that rewriting those in Rust will take an eternity, so not sure what is actionable here, hence closing."
That's Rust shining from all its glories here gentlemen...
The best language, if there is nothing changing.
That's a thing to make a web server or a library that displays Fibonacci, that's something else when there are humans with changing scopes...
Its not Rusts fault, the devs are simply lazy and making insecure products, as they dont want to rewrite everything.
That's what I am saying.
To quote you: "they don't want to rewrite everything" ...
Writing Rust often implies major refactoring and it takes so much time to write that your requests go: "pewf" closed due to the amount of effort it takes.
Anyway, been there, done that! Zig is probably the real future; it's a joy to write, it compiles fast, clear to read, and safe.
It has shared libraries and a proper integration with existing C/CPP code base.
You should try it, that's an amazing language with a real potential to replace the legacy.
They were exaggerating to avoid work. Look at the PR diff to determine whether your anti-Rust bias is true.
There are no patch, the issue has been closed as in rejected.
There are a few tasks that are open that are loosely related, but let's not mix things up.
Moreover, I will take the words of the maintainers over a random potato on a forum.
No offense...
The issue was closed, but a draft PR was linked... potato:
As I mentioned, a couple of tasks loosely related. The patch you are mentioning isn't complete nor address the real problem.
It is an ugly hack at best.
Refrain from your urge to defend rust at all costs. You are sliding more and more toward the specifics of a project than the fact I stated about rust in general.
If you still not get my initial point I've made, read this.
That's a long read explaining what I meant. My point was about Rust, not Zed or the developers of Zed in particular.
And for the Zed editor, I wish them the best luck, it seems like a great project that people enjoy.
Please feel free to comment and share your thoughts on the article above, my dear favorite nutritious veggie.
I use rust only if we need performance, for small services. The industry does the same. People use node for backend but e.g. redis is in rust. It's a good tool if you use it for the right stuff.
EDIT: redis is not in rust, but e.g. aws writes many services in rust
Wtf are you talking about? Redis is in C....
Lots oft running npm wrappers for an allegedly Rust dritten Pierce of Software
I still don't understand why I should need GPU acceleration for my fucking TEXT EDITOR
What's that?
Integrated Development Environment (IDE) from the makers of Atom. It is written in rust.
New Editor, by Atom Devs, Rust
Editor, Atom, Rust