Viewing profile — youngun

I'm not sure that curl | sh is a "broken paradigm" -- no more broken than than running JavaScript in a browser. The only difference between the two is in the sandboxing. The soluti…

The proper alternative is some sort of lightweight virtualization like Docker, with a proper security policy in place. You can mostly do this today curl | docker run --rm -t -i ubu…