Hacker News new | past | comments | ask | show | jobs | submit login

It's just auto-updating. Would be better if it was using the github url directly. Should also be using a method less prone to corruption



It sort of isn't though. You put it there and you don't take it away. You don't put anything else in there to load it. It stops loading entirely if you take out the ethernet cable. That kind of seems like it's loading from the internet every single time. The setup function doesn't add anything to load it without the init script running. That's kind of weird, to me at least.


Oh, I didn't mean to imply it was a good way of doing things, just that the intent was to auto-update. Regardless of how the auto-update works, if a program like this is auto-updating then you're giving arbitrary execution permission to the project.


In Linux there is a package manager for auto-updating.


They suggest to verify a hash of downloaded script which means that after update the script will not be executed. So it just doesn't make sense.

Probably it is an experiment to see how many people will fall for this.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: