1 comment

[ 2.6 ms ] story [ 12.5 ms ] thread
I don't like that the first step in the tutorial, before they even explain what this thing is, is "execute our arbitrary code on your machine"

> Start the LinkedRecords backend locally with a single command (requires Docker)

> docker compose -p linkedrecords -f https://github.com/wolfoo2931/linkedrecords.git#main:docker-... up

(I didn't know docker-compose could take arbitrary URLs like that. cool. `curl | sudo bash` is old-school I guess?)

for every 1 legit use of starting off a blog post with those instructions, I can think of N that would be malicious or scammy in some way.