3 ms·
A good reminder to practice good opsec to be weary of packages that instruct you to `curl <url> | bash`. You never know what you're running.
by mdmglr 4y ago
A good reminder to practice good opsec to be weary of packages that instruct you to `curl <url> | bash`. You never know what you're running.
- tzs 4y agoWorse, it is possible for the server to detect that you are doing that [1]. It could serve you malicious code when you "curl | bash" and then afterwards when you go to download a copy of the script to try to figure out what the heck it did the server could serve you benign code. [1] https://news.ycombinator.com/item?id=17636032 https://news.ycombinator.com/item?id=17636032
- mdmglr 4y agoOh wow that is good.