It’s worse than that. You can verify `curl <url>` and still get pwned, because it’s possible to detect if you pipe it into anything[1]. [1] https://www.idontpl

It’s worse than that. You can verify `curl <url>` and still get pwned, because it’s possible to detect if you pipe it into anything[1]. [1] https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/ https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...