As reported in #3459, the README file suggests an insecure download and
execution via HTTP instead of HTTPS.
However, before this essential migration to HTTPS is completed, this
patch adds checksums that will allow users to verify the authenticity of
their download.
The authenticity of the checksums is assured because it will be viewed
on an HTTPS-served GitHub page on the correct author username
(robbyrussell).
I have verified this checksum by downloading the HTTP script from two
different network topologies:
1. The Google corporate network
2. The Linode network
I also visually verified that the script code is not malicious. I have
also compared it with the HTTPS-served script at this location and found
it to be identical:
https://raw.githubusercontent.com/robbyrussell/oh-my-zsh/master/tools/install.sh
This comes from an HTTPS connection from a valid GitHub domain which
ensures that the owner (robbyrussell) has pushed this file as long as we
trust GitHub and PKI.
This commit is signed with my personal GPG key for authenticity.
The reviewer should also verify the checksum is correct.
Thanks for helping keep users secure.
Fixes#3459
Reverts #2296, but mostly #1883.
There is no need to source ~/.profile when this script is read. oh-my-zsh writes no configuration data in ~/.profile.
If the user wishes to use data within ~/.profile, then they should source it in another place.
Fixes#2315
Added shuffle functionality to the itunes command in the OSX plugin.
iTunes 12 doesn't support setting the "shuffle" property on the playlist
from what I've read, so this simulates the user interacting with the
iTunes interface. The toggle option "clicks" the shuffle button in the
Now Playing area. This has the effect of toggling the shuffle setting on
whatever is currently playing. The on and off options use the Shuffle
menu bar items.
Usage: itunes shuffle [on|off|toggle]
- if user has rm set as an alias to 'rm -i' user is prompted to whether to
remove the nohup.out file.
$ ddg fools
nohup: ignoring input and appending output to ‘nohup.out’
rm: remove regular empty file ‘nohup.out’?
- if output redirected to a file nohup will not create nohup.out and rm is
unecessary.