← Back to context

Comment by fny

13 hours ago

Why doesn't Ubuntu fit the bill? You can even install hombrew on it. Everything works like a mac with no fuss.

Also the only reason I left Linux was due to hardware. Ubuntu was convenient enough.

Homebrew is like giving a bunch of wikipedia randos remote shell access to your computer. There is no enforced code review policy. Any maintainer can make a commit under a pseudonym and merge their own code to main without review.

Homebrew should not be allowed near any machine you need to be able to trust.

  • > Homebrew is like giving a bunch of wikipedia randos...

    And I'm guessing you go to https://www.britannica.com/ when you want to learn something about a new topic, right?

    • I love wikipedia for research. It is great that anon randos can help keep a common encyclopedia maintained with high accountability. If a mistake happens it is quickly corrected.

      But that trust model does not work with software.

      It is negligent that MacOS users, even those with prod access, all let any anon randos that sign up to be Homebrew maintainers execute any code they want on their computers with no accountability. By the time someone figures that out and corrects it, the damage is done.

      What is worse, is almost zero MacOS users I talk to are aware of this risk. Even security engineers. Many say "no worse than NPM" as if that is a defense.

  • This isn't true at all lol, if you make a PR to the formulas it is certainly reviewed. By a real human no less. wtf are you talking about