4 ms·
No, it has been demonstrated that servers can detect whether a request is being downloaded or piped to a shell, so they can vary the response accordingly, sendi
by useragent86 7y ago
No, it has been demonstrated that servers can detect whether a request is being downloaded or piped to a shell, so they can vary the response accordingly, sending safe-looking content to a user who's inspecting it, and sending malicious content to a shell.
https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/ https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...
`curl | sh` is a terrible anti-pattern. It should never be encouraged.
- em-bee 7y agofamiliarizing yourself with the program, the author and the supply chain is more than just inspecting the downloaded code.