not_IO@lemmy.blahaj.zone to Programmer Humor@programming.devEnglish · 1 month agofinally something worse then curl | shlemmy.blahaj.zoneimagemessage-square59fedilinkarrow-up18file-text
arrow-up18imagefinally something worse then curl | shlemmy.blahaj.zonenot_IO@lemmy.blahaj.zone to Programmer Humor@programming.devEnglish · 1 month agomessage-square59fedilinkfile-text
minus-squareUnleaded8163@fedia.iolinkfedilinkarrow-up1·1 month agoIf you trust the site, curl | sh is no worse than any other install method. If you don’t trust the site, it’s also no worse.
minus-squarenot_IO@lemmy.blahaj.zoneOPlinkfedilinkEnglisharrow-up1·30 days agothat’s why you install from repos managed by people you trust, it’s like an app store without all the evil
minus-squarekayzeekayzee@lemmy.blahaj.zonelinkfedilinkEnglisharrow-up1·1 month agoyeah you can also just curl > cat and check the script yourself
minus-squareFishFace@piefed.sociallinkfedilinkEnglisharrow-up1·1 month agoDo you mean curl | cat or do you really want to create a file called cat? Also piping to cat seems redundant but malicious hosts can detect whether the request is getting redirected, using some clever trick, so it’s not. Also, your chance of spotting something bad in a malicious script is probably quite small.
If you trust the site,
curl | shis no worse than any other install method. If you don’t trust the site, it’s also no worse.that’s why you install from repos managed by people you trust, it’s like an app store without all the evil
yeah you can also just curl > cat and check the script yourself
🐱.sh
Relevant
Do you mean
curl | cator do you really want to create a file called cat?Also piping to cat seems redundant but malicious hosts can detect whether the request is getting redirected, using some clever trick, so it’s not.
Also, your chance of spotting something bad in a malicious script is probably quite small.
or just curl