Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I disagree. I’m on Linux for my main installation and I know I can inspect the bash script if I want to.

It’s impossible to please everyone. Pipe to sh is simple, transparent, and easy to do. If reading through 200 lines of installation script is too much then reading through thousands of lines of Zed’s code base will certainly be too much.

They also list other ways of installing https://zed.dev/docs/linux



> Pipe to sh is simple, transparent

Not so transparent[1]. Packages from a package repo are signed, usually with keys not stored on the same server so if someone nefarious breached a server they can easily replace a bash script, they can't re-sign and replace a package.

Sure it's safe if you download the script then review it then install it, but hey, you reviewed it last time, it's probably unchanged, what's the harm of piping it directly to bash next time you need to get set

https://web.archive.org/web/20240228190305/https://www.idont...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: