alt Hacker Newsmost of my machines use unnatended-upgrades
Increasingly software is distributed by "curl dodgysite.com/get.sh|sudo bash -", no different to running "install.exe" on windows
Surely Windows Update is a vetted repo as much as arch or debian
Replies
drnick1 • yesterday at 4:59 PM
> Increasingly software is distributed by "curl dodgysite.com/get.sh|sudo bash -"
I don't think this is the norm at all. I have seen curl/bash install scripts for tools like Claude Code, but they don't use sudo, and the expectation is that you deploy them in isolated user accounts or containers.
➕ show 1 reply
lostmsu • yesterday at 2:58 PM
Nah, install.exe must be signed by a certificate authority or you get 10 prompts, and they do revoke certificates.
There is one major difference: those install under your users. I haven’t seen a windows installer that didn’t require admin. Some older Linux apps require sudo. They don’t need to do that anymore, not for a while. We have xdg standards of where to install stuff in a users home directory.