4 ms·
No it says that it will show you the script first so you can review it. What I don't get is why do you nee d a program for this, you can simple curl the script
by lr0 1y ago
No it says that it will show you the script first so you can review it. What I don't get is why do you nee d a program for this, you can simple curl the script to a file, `cat` it, and review it.
- simonw 1y agoIt shows you the installation script but that doesn't help you evaluate if the binary that the script installs is itself safe to run.
- dotancohen 1y agoRight, this tool does one thing - make it easy to see the script. Another tool does something else. That's kind of the UNIX Philosophy.
- deleted 1y ago[deleted]
- geysersam 1y agoYes but even if you inspect the code of the installation script the program you just installed might still be compromised/malicious? It doesn't seem more likely that an attacker managed to compromise an installation script, than that they managed to compromise the released binary itself.