3 ms·
Wrong. You are trusting much more than that, including network components outside of your control and the author's. Plus you are pushing forward the bad patter
by eeZah7Ux 7y ago
Wrong. You are trusting much more than that, including network components outside of your control and the author's.
Plus you are pushing forward the bad pattern and being part of the problem.
You are encouraging other authors and users to do the same.
- aequitas 7y agoTell me how this is different for downloading a binary instead. Unless you get something like a GPG through a completely different channel.
- eeZah7Ux 7y agoFirst, distribution do exactly that. The GPG chain of trust is preinstalled. Second, there are at least 3-4 more attacks possible during curl-bash. You can simply read the links on HN.