Exactly.
In the end, you either trust the site you download the app from or you don't.
If you do, doing curl | sh before running the app itself doesn't add any additional risk, it seems.
@pantas.net.bsky.social
Amateur developer, professional contrarian. I post whatever comes to mind, kind of just what I'm thinking about at the moment. Tends to break down ~ 50% tech, 50% whatever. @thepanta82 at twitter. https://pantas.net
Exactly.
In the end, you either trust the site you download the app from or you don't.
If you do, doing curl | sh before running the app itself doesn't add any additional risk, it seems.
I never understood why people think it's insecure.
What can curl | sh do that the binary you download and run cannot do?
Something to do with dom being torn down on wrap change?
18.05.2025 22:28 โ ๐ 5 ๐ 0 ๐ฌ 0 ๐ 0Last time I picked DB tech, I opted for doing raw SQL over query building.
Reason: experience from a prev project, where converting from SQL to a knex command chain was super annoying.
If I was picking today, I'd 100% go for a query builder. LLM solves the conversion now.
Tech influencers used to be upstream in the dev FOMO pipeline. "Here's a new lib all the cool kids are using, but you can't because of your trash legacy project."
But since AI tools aren't tied to a codebase, we're now all following along and FOMO-ing at the same time. Hmm.
Very similar to EU laws, interestingly.
25.03.2025 07:34 โ ๐ 0 ๐ 0 ๐ฌ 0 ๐ 0I managed to setup zero downtime deploys WITHOUT clustering, staggered migrations, or blue/green deploys.
Frankly, it was way more DIY than I thought it would be. Reverse proxies should just come with this stuff built in.
It's interesting that even he seems to have bought into the mirage.
It's true when they say many successful people have no idea why they are successful, like how a bird can fly without understanding the physics of flight.
As an engineer who builds products, I can attest we generally want to build more products rather than do sales.
As Groucho Marx said, you wouldnโt want to meet an engineering team that would want to meet you.
Back there I could fly a gunship. I could drive a tank. I was in charge of million dollar equipment.
Back here, I can't even close a B2B SaaS deal!
There is no click. Just a slow smolchy binding of flesh and machine over years.
07.01.2025 07:24 โ ๐ 9 ๐ 0 ๐ฌ 0 ๐ 0After getting used to typescript's various forms of template strings and unions, it's hard to go back to only having ordinary opaque strings in other languages.
07.01.2025 07:01 โ ๐ 4 ๐ 0 ๐ฌ 0 ๐ 0Most remotes works like UDP rather than TCP, and it's kind of annoying.
04.01.2025 09:11 โ ๐ 4 ๐ 0 ๐ฌ 0 ๐ 0Factory functions > constructors in js.
The reason: they can be async.
With constructors, you often end up in an awkward state, where the class exists but isn't valid to use yet.
Sometimes necessary, but still annoying.
When I first start a cursor project vs when it matures a bit.
03.01.2025 10:13 โ ๐ 4 ๐ 0 ๐ฌ 0 ๐ 0AI can generate any image, except all the ones I need.
AI can write any text, except any I'd want to publish.
AI can code any program, except the ones that matter.
Oh God, it escaped control.
The jihad has began.
This app is the worst. Don't use it.
The reason: pg collation is subtly different on mac vs linux, where your actual stuff will be running.
Run db in docker or remotely instead.
Everything this tab group touches is our kingdom
30.12.2024 10:54 โ ๐ 2 ๐ 0 ๐ฌ 0 ๐ 0Today: Working on Mac is both satisfying (hardware) and infuriating (macOS).
15 years ago: Working on Mac is both satisfying (OSX) and infuriating (hardware).
1 like = 1 take
24.12.2024 02:08 โ ๐ 91 ๐ 1 ๐ฌ 1 ๐ 0Wild how the internet turned out to be just a temporary caching layer for the internet archive.
24.12.2024 22:15 โ ๐ 1 ๐ 0 ๐ฌ 0 ๐ 0I used to hate bash. Always kept an eye out for a more sane shell environment.
I no longer care. GPT writes that slop for me now. Its obscure syntax no longer hurts.
AI will enshrine bad languages forever. We will never get rid of them.
But maybe that's OK.
"A meeting can completely kill my flow"
ANY context switching can kill the flow. Even between projects, or different types of work.
It's just that most corporate devs only do one type of technical work, so all their experience with flow interruptions is centered on meetings.
CSS tip: if you can't get a smoothly looping animation (eg. due to quirky way percentages work in different contexts), just increase the duration.
Your visitors will probably never notice it glitch out once every 10 minutes.
Thank you tailwind, for no longer having to name things.
23.12.2024 09:44 โ ๐ 1 ๐ 0 ๐ฌ 0 ๐ 0This is how Butlerian Jihad begins
22.12.2024 19:48 โ ๐ 0 ๐ 0 ๐ฌ 0 ๐ 0Best UI-s are deeply hardcoded. Strings, images, colors - all directly produced and manipulated by your own code.
The moment you start extracting "content" into resources, CMS-s, translation files etc, the end product starts to suffer.
(you gain other benefits, though)
People who can harm you:
- governments
- criminal orgs (who can buy leaked data)
- to an extent, big tech
People who can help you:
- health startups
- researchers
- small businesses
We've adopted anarcho-tyranny for privacy.
People who can harm you get all your private data, and people who can help you get none.