Live data from Hacker News

Netboot

netboot.xyz

41–48 of 48 posts

Re: Netboot

#43

Looks similar to boot.rackspace.com.

Yeah, I originally wrote boot.rackspace.com. I built netboot.xyz based on a lot of that original code, expanded what Operating Systems and Utilities it supported, and wanted to make it a more open project for everyone to take advantage of.

Re: Netboot

#44
post #8
post #6

Earlier quoted context omitted.

Run: sh | wget http://www...something.com/install.sh to install something automatically! Way too many projects do it, from my head: rvm and oh-my-zsh.

Don't forget that many require you to use sudo.

zsh: command not found: sudo

Re: Netboot

#46
post #6
post #3

Running unsigned code from the internet? Have I woken up in crazy land today? When did things like this become acceptable.

Run: sh | wget http://www...something.com/install.sh to install something automatically! Way too many projects do it, from my head: rvm and oh-my-zsh.

curlpipesh.tumblr.com/

Re: Netboot

#47

The only thing I get from xyz domains is spam and viruses (I didn't click the link).

I've seen more legitimate users of .xyz than of .biz (which pre-New GTLDs was the go-to TLD for general awfulness...)

Re: Netboot

#48
post #5

Earlier quoted context omitted.

People are running untrused code all the time. How uses a 100% open source, repoducably build, 100% audited os?

The problem is that this is going over the intenet. If you haven't seen what kind of problems this can cause, you should look at moxie sslstrip talk from defcon. The problem arises when other people want root access to your system and they can now get it from a VERY simple man in the middle. Running untrusted code is one thing, running it after pulling it from the internet is an ENTIRELY different subject.

All my apt-get downloads go over the internet. All my install isos.

People download third party docker contains. I can't see how this is worse.

Post reply on HN