4 ms·
Hah, it is quite surreal what kind of scripts are asked to be curled and piped to a shell. And some users do eithout hesitation, because some website asked them
by jzzskijj 9y ago
Hah, it is quite surreal what kind of scripts are asked to be curled and piped to a shell. And some users do eithout hesitation, because some website asked them to. Hopefully this pipe to sudo shell joke works as an eye opener to some.
- slimsag 9y agoAs long as it is over HTTPS and you trust the author, it shouldn't be any different than downloading and running an arbitrary binary from a website.
- jzzskijj 9y agoSure. Trust. But shell script at least gives easy means to have a glimpse what is it going to do. As legitimate websites of software have been breached to serve infected packages (like CCleaner[1]) or otherwise fraudulent content (even kernel.org[2]), I always shudder a bit, when I see being asked to pipe something directly from curl to a (root) shell. 1. https://www.extremetech.com/internet/256238-ccleaner-infection-severe-thought-targeted-microsoft-google-samsung https://www.extremetech.com/internet/256238-ccleaner-infecti... 2. https://lwn.net/Articles/457142/ https://lwn.net/Articles/457142/
- shakna 9y agoApart from partial execution issues.