3 ms·
I know you can expect the source code, but this trend of pasting things into the terminal with sudo is crazy: > curl -L https://raw.githubusercontent.com/kamra
by nkkollaw 10y ago
I know you can expect the source code, but this trend of pasting things into the terminal with sudo is crazy:
> curl -L https://raw.githubusercontent.com/kamranahmedse/git-standup/master/installer.sh https://raw.githubusercontent.com/kamranahmedse/git-standup/... | sudo sh
- j_s 10y agoEspecially in light of the recent article and discussion "Tactics, Techniques, and Procedures of the Yahoo Hack" https://news.ycombinator.com/item?id=13921524 https://news.ycombinator.com/item?id=13921524 JSP shell committed into Git, self-approved, and queued for deployment
- erelde 10y agoPlus, why would we install a bash script as sudo ?
- eridius 10y agoI didn't look at the makefile but I imagine it installs into /usr/local/bin, which usually requires root permissions.
- nkkollaw 10y ago(I meant inspect, not expect)