Post #3770645
2026-07-12 22:31 UTC
@kbob@chaos.social yes, yes, no. (Ie Mac user, HomeBrew user, not kept awake by that.)
It’s… not my favourite design choice. But on a “basically single user” system, with lots of other user-writable areas usable as hooks for malware (eg excessive modern reliance on putting things in ${HOME}), in the end I concluded it didn’t make a particularly meaningful security difference.
Everything that really matters is already read/write by my user ID anyway.
Replies (1)
-
@ewenmcneill@cloudisland.nz 2026-07-12 22:36
@kbob@chaos.social the one other thing I’d note about HomeBrew (which I also don’t like) is they aggressively deprecate older OS / architectures (eg x86-64 likely has only a few months support left). It’s also basically (unreproducible) binary only as far as what’s supported (you *can* build from source yourself but it’s both strongly discouraged and officially unsupported). So at this point I’d only install HomeBrew onto macOS / Apple silicon. https://docs.brew.sh/Support-Tiers