4 ms·
Sure. Trust. But shell script at least gives easy means to have a glimpse what is it going to do. As legitimate websites of software have been breached to serv
by jzzskijj 9y ago
Sure. Trust. But shell script at least gives easy means to have a glimpse what is it going to do.
As legitimate websites of software have been breached to serve infected packages (like CCleaner[1]) or otherwise fraudulent content (even kernel.org[2]), I always shudder a bit, when I see being asked to pipe something directly from curl to a (root) shell.
1. https://www.extremetech.com/internet/256238-ccleaner-infection-severe-thought-targeted-microsoft-google-samsung https://www.extremetech.com/internet/256238-ccleaner-infecti...
2. https://lwn.net/Articles/457142/ https://lwn.net/Articles/457142/