This doesn’t pass the smell test.
- Instructs to pipe the output of
curl
insh
- Assumes that
sh
isbash
[1] - “Community” behind it is apparently originating in Berlin, and is now a “nonprofit foundation in Switzerland”, but has no publicly disclosed legal structure anymore.
- “Community” behind it uses discord, but not revolt, matrix, simplex or others.
- “Community” behind it uses twitter, but not mastodon.
- Cryptobros.
sh <(curl -sSf https://url.redacted/script)
↩︎
Installing by piping from curl is pretty common and not a red flag in and of itself. Even Rust is installed this way. If you don’t trust the URL, you also shouldn’t trust any binary installers downloaded from that website.
Rust is a red flag
Why?
- Instructs to pipe the output of
Serious question: What is the point?
Just push into half a dozen mirrors and you are pretty censorship resident without the crypto voodoo put on top of git.
Github has one huge value: Discoverability of a project. This is even worse than hiding your project in one of the smaller forges… nobody can remember the mess of letters you need for this.
Do you think it’s good that the majority of code is hosted on a proprietary service? Do you think it’s good that that service is centralised? Do you think it’s good that if you want to provide an alternative to that service, you create another island with a different ecosystem that cannot communicate with the other island?
No, I would prefer a world where not everything is concentrated on github, but that is the world we have to work with:-)
But how does this address any of the problems you brought up?
Do you think a project will be more discoverable when you say: “Clone foo/bar from github” or when you say “install this strange crypto-BS, then clone rad:xyhdhsjsjshhhfuejthhh just like you normally would”?
Apart from discoverability you get a known workflow for contributors, a CI and a bug tracker. Coincidently those make it hard for projects to switch away from github… how does this address any of that? “Use this workflow, which is even wierder than any of the other github alternatives!” and “just set up a server yourself”?
Sorry, this is just yet another crypto-bro solution in search of a problem. Technically interesting, I’m give you that, but useless.
No, I would prefer a world where not everything is concentrated on github, but that is the world we have to work with:-)
Then how do you not see the point of a distributed sourceforge?
But how does this address any of the problems you brought up?
Have you read the webpage? radicle is opensource, it’s distributed and thus many interconnected islands, just like the fediverse. Why are you on the fediverse and not on reddit?
Do you think a project will be more discoverable when you say: “Clone foo/bar from github” or when you say “install this strange crypto-BS, then clone rad:xyhdhsjsjshhhfuejthhh just like you normally would”?
Again, have you even opened the webpage?
Sorry, this is just yet another crypto-bro solution in search of a problem.
So github is not a problem? And regarding crypto, show me where in the code it forces you to use crypto. Show me the
rad
command that inhibits you from doing a normal git operation by bringing up crypto.