[guy98238710]

> curl -L "https://replicate.fyi/install-llama-cpp" | bash

Seriously? Pipe script from someone's website directly to bash?

[madars]

That's the recommended way to get Rust nightly too: https://rustup.rs/ But don't look there, there is memory safety somewhere!

[creata]

In rustup's defense, if you're already trusting them enough to run their executables, this isn't that much worse, afaik.

[raccolta]

oh, this again.

[cjbprime]

Either you trust the TLS session to their website to deliver you software you're going to run, or you don't.

[dharmab]

You can clone llama.cpp on GitHub and the models from HuggingFace. No need to trust this unrelated website.

[gattilorenz]

Yes. If you are worried, you can redirect it to file and then sh it. It doesn’t get much easier to inspect than that…

[dopidopHN]

Pretty common. You can inspect the script before piping it.

[Evidlo]

Bad actors can detect if its being piped to bash and send different data. Better to just download the script first if you're concerned.

[mike_ivanov]

who doesn't love surprises

[alexgartrell]

IMO this is equivalently scary to installing an arbitrary rpm.