3 ms·
Not just apt-get it might even have some `curl ... | sh`.
by throwawayffffas 1y ago
Not just apt-get it might even have some `curl ... | sh`.
- chasd00 1y agoCurl | sh is gold. It’s like finding a candy bar on the street and eating it heh.
- dns_snek 1y agoYou can say the same about the vast majority of distribution methods we have. There's no difference between `curl | sh` and executing a binary you download from the internet.
- bravesoul2 1y agoChecksums and signatures make it slightly better. At least you can go from OK to vulnerable by downloading the same thing as an hour ago. But if you upgrade then yeah.