3 ms·
Well, a yum repository would have to be maliciously modified to cause bad things to happen. Piping curl could end up with fatal consequences even by accident, i
by 0x0 13y ago
Well, a yum repository would have to be maliciously modified to cause bad things to happen. Piping curl could end up with fatal consequences even by accident, if the shell script is cut off at the worst possible moment by accidental connection loss...
- migrantgeek 13y agoWhat if the repo was malicious from the start just waiting for you to install the first safe version only to give you the trojan later? The shell script prematurely terminating isn't really a security concern and could be fixed by downloading and running the script separately. I guess my argument is that if you don't trust the source, don't install the application without looking through the code or running through some analysis software. I would say that sites that tell users to install software in this fashion should warn them about the dangers so people can make informed decisions.