3 ms·
"piping to a shell" is _impossible_ to inspect. The author is making that point himself: > running arbitrary commands on your machine that could change based o
by FiloSottile 13y ago
"piping to a shell" is _impossible_ to inspect. The author is making that point himself:
> running arbitrary commands on your machine that could change based on user agent to trick you
Without even considering MitM, that running signed executables kind of mitigates.
Anyway, the point of the author is the failing mode.
- shawabawa3 13y ago> "piping to a shell" is _impossible_ to inspect Absolutely not. The author points out 1 way in which stupid inspecting could be beaten, however you can always do $ curl https://coolscript.com/script > tmp.sh $ cat tmp.sh echo "I'm safe!" $ ./tmp.sh