2 ms·

Putting malicious code before the signature doesn't work because gpg chops it out. It only outputs the verified part. It is definitely a kludge though.

• deleted 8y ago
  [deleted]
• e12e 8y ago
  So the shebang is redundant, except for testing during development? [ed: and for allowing the daring to just do curl|bash, I guess]
  • api 8y ago
    It's not strictly necessary, no.