4 ms·

Yes, it's insecure and is based on complete trust of the author of the script and the hosting provider, but there's an easy workaround: Don't pipe to bash immed

by unfunco 11y ago

Yes, it's insecure and is based on complete trust of the author of the script and the hosting provider, but there's an easy workaround: Don't pipe to bash immediately. Download the file, inspect the contents and then if you're satisfied with what the script will perform, then run it through bash.

federico3 11y ago
That's far from enough.
baldfat 11y ago
The issue is the same for installing anything from source not because you sued Bash/Curl same can be said for the Arch community made package managements for the AUR packages.