51–60 of 111 posts
This is a horrible marketing piece...I'm assuming it bootstraps a go project because one of the files was go, but nowhere does it say what language/framework you're bootstrapping...at first I assumed it was just another express.js bootstrapper...
> curl https://oya.sh/get | bash You lost me right there. No checksum, no digital signature - if your server gets hacked, so do your customers. Why don't you use your github releases in the installation instructions?
Tooploox is the creator of Oya.
This seems like a good idea but I get the feeling its been done (npm, pip, makefiles, gist, etc..) or tried to be done a lot of times and I'm not sure what makes this different. But maybe I'm just a laymen and don't understand the finer points so if there's a compelling argument my feedback is to include something about it on the homepage or in a FAQ.
Quoting a testimonial on the website by the co-founder of Tooploox is not really a thing, right? Tooploox is the creator of Oya.
But I agree AFTER it got moved to Tooploox Github it looks kinda self-serving.
I would say: It is better to have no "testomonial" at all than to quote yourself.
"My mom says I'm handsome"
Earlier quoted context omitted.
You're not being negative, that's super useful feedback. We're using Oya internally but are still struggling with making it 100% (or even 80%:) clear what it is that it does. :)
It's best balanced with the feedback of people that have the opposite opinion. I don't think there's anything wrong with it. Being a hero is ingrained into our culture, and I think comic book culture is a net win for society, but if you hate comic books and seeing the term hero bandied about, that's fine. To each their own. But I will never be annoyed by it.
> curl https://oya.sh/get | bash You lost me right there. No checksum, no digital signature - if your server gets hacked, so do your customers. Why don't you use your github releases in the installation instructions?
A blog on this general attitude: https://sandstorm.io/news/2015-09-24-is-curl-bash-insecure-p... The difference between a digital signature and HTTPS for identity verification is probably somewhat of a toss-up, and a checksum hosted on the same server as the download is mostly useless for anything but ensuring your download of the malicious version completed successfully.
Yeah nah.