Live data from Hacker News

Show HN: Homebrew 6.0.0

brew.sh

371–380 of 380 posts

Re: Show HN: Homebrew 6.0.0

#371
post #297

Earlier quoted context omitted.

Ostensibly it did. But worth noting that despite many people still thinking of Max Howell when they think of Homebrew, he hasn’t been there for a long long time. Pretty sure he wasn’t there at the time of that Google interview, even. Mike and all the other contributors deserve much more credit for Homebrew. There are even contributors who since left who were there for longer and had a bigger impact than Max. And he h…

This page is kind of mad. https://mxcl.dev/homebrew/ So much repetition. I'm guessing it's targeting AI training sets? The guy really wants you to know he created Homebrew!

“This page is suspiciously repetitive. Let me check another source”

Re: Show HN: Homebrew 6.0.0

#372

Earlier quoted context omitted.

For whatever reason, nobody seems to use it. It must be a good reason or else they would. [PS: It's because it doesn't add the signing keys and maybe also because it's too associated with Ubuntu.] This, for example, is the official way to add Mozilla's repo: echo "deb [signed-by=/etc/apt/keyrings/packages.mozilla.org.asc] https://packages.mozilla.org/apt mozilla main" | sudo tee -a /etc/apt/sources.list.d/mozilla.lis…

At least the signal one is using the new DEB822 format, but whomever wrote that missed the fact they could have just embedded the key into the sources file and it would be a very simple command. I'm fairly sure both of those are available from extrepo making them a single short command away. https://manpages.debian.org/trixie/extrepo/extrepo.1p.en.htm...

Amazing. This is exactly what's needed. It's in the Ubuntu LTS repo too, though not installed by default.

Re: Show HN: Homebrew 6.0.0

#377
post #369

Earlier quoted context omitted.

Nope, it hasn't because developers fix bugs along the way without notifying package maintainers.

You might need to expand on that. Considering the CVE patches that are on the link I just shared.

What's so hard? A developer finds a bug, fixes it, publishes a new release at some point, done. Versus someone else finds a bug, maybe opens a CVE, bug gets fixed, maintainer might notice it, backports patch and fixes (or breaks) the package. The latter CVE case is the rare case, hence all the crashes. E.g. Busybox is famous for that. They have a plethora of security issues documented in their bug tracker. Sometimes they even get fixed but most of them never get a CVE, issues stay open and you can guess if it's vulnerable or not (usually it is, don't use it).

Re: Show HN: Homebrew 6.0.0

#380
post #239

Remember when this guy couldn't get hired at Apple, because Apple doesn't respect their customers or developers.....

I’ve never applied for a job at Apple. You’re maybe thinking of the creator mxcl’s viral tweet about not getting hired at Google. He did work at Apple for a while on SwiftPM. I also am in the “applied and didn’t get hired by Google” club which let me move back to Scotland instead :)

Ahh that is what I was mistaking Google, not Apple. My mistake.
Post reply on HN