3 ms·
You can detect whether the script is being piped into sh, so downloading the script via for example FF might produce different results than piping it to shell,
by tpxl 8y ago
You can detect whether the script is being piped into sh, so downloading the script via for example FF might produce different results than piping it to shell, making audits useless.
- steveklabnik 8y agoSure. If you're worried about that, it's easy enough to download it first, and then run it, without the pipe. If you're auditing it, you've already downloaded it, so it's unclear to me why you'd re-download and pipe rather than just running it.
- nimmer 8y agoYou still have zero guarantee that other people are getting the same code. Encouraging people to run code from some random URL on the Internet is always bad.