Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I think there is but what would you make different?


Not have a 1 liner installation script that's a security nightmare? :)

eg, this is the Countly one (specifically run as root):

  wget -qO- http://c.ly/install | bash
If someone manages to break into the c.ly redirection service, or the website/CDN/etc serving that, new users would likely be in for a bad time. And the problem could be very subtle, if it's done by someone clueful.

Just for added er.. goodness (/s), the Countly instructions also need people to:

  Disable SELinux on Red Hat or CentOS if it's enabled.
  Countly may not work on a server where SELinux is enabled. 
  In order to disable SELinux, run "setenforce 0".
sigh




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: