
Unboxed Roundup: Our links for w/c 18th April 2016
Chris Carter
April 22, 2016
Git Rebase without Tears - Oskar P
https://matthew-brett.github.io/pydagogue/rebase_without_tears.html
I branched 'master' to 'feature-a', then branched 'feature-a' to 'feature-b'.
However, now the 'feature-a' branch has merge conflicts, and rebasing 'feature-b' is becoming a nightmare.
This URL explains the magic of the full rebase command: git rebase --onto <graft-point> <exclude-from> <include-from>
.
curl | bash
is it good or bad? - Murray S
- https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/
- https://sandstorm.io/news/2015-09-24-is-curl-bash-insecure-pgp-verified-install
There's no denying that the curl | bash
pattern is super convenient for people installing software. So it's not surprising it's quite as prevalent as it is. There's plenty of articles out there that describe why you should be wary of installing software this way, and the first article is another of those but this time it describes an interesting exploit. After reading the first article I don't think I'll be using the pattern to install software from an arbitrary server I've never encountered before, but after reading the second I'm more reassured about it as a pattern from software vendors and servers that I do trust.
Track of the Week - Andrew W
The sad news this week of Prince's untimely passing means there's only one possible artist to choose from, but with such a wide repertoire to select from it's still a difficult job. For me 1984 was a memorable year with so much good music in it, so his breakthrough hit of 'When Doves Cry' from that year is my personal choice and still sounds amazing even 32 years later.