2 ms·
The only real difference is that there are ways the server can know if you are downloading it for inspection, or if you're piping it straight to bash. A hacked
by dx87 7y ago
The only real difference is that there are ways the server can know if you are downloading it for inspection, or if you're piping it straight to bash. A hacked/untrusted site could serve up a malicious script file if it detects that it's being sent straight into bash, and a clean script if you aren't. With most things you download from the Internet, you download then run the software if you want. Curl to bash is download and run with no confirmation step in the middle.
- gruez 7y ago> Curl to bash is download and run with no confirmation step in the middle. Which is fine, because almost nobody is going to thoroughly inspect the code anyways. The bash script looks pretty trivial, but it's running a privileged docker container, which means it has full root access. Are you really going to inspect every nook and cranny of the docker container for exploits?