3 ms·
The curl | bash thing gets talked about so much here, but I wonder who’s stupid enough to not perform their malicious tasks in the binary itself as opposed to t
by supriyo-biswas 3y ago
The curl | bash thing gets talked about so much here, but I wonder who’s stupid enough to not perform their malicious tasks in the binary itself as opposed to the shell script which can be inspected at runtime with `bash -x`.
- wepple 3y agocurl|bash is possibly worse in one minor way; the binary can be dynamically generated or swapped out based on analysis of the target. Downloading directly from GitHub or apt-get is a tiny bit safer in that regard.