4 ms·
Yeah, don't download and run binaries from random links on the internet either. I don't think anyone is against recommendations of running "curl trustedsite.co
by freshhawk 12y ago
Yeah, don't download and run binaries from random links on the internet either.
I don't think anyone is against recommendations of running "curl trustedsite.com/install | sh" except for the bad habits it teaches to people who don't know what curl and sh actually do, but wouldn't download and run a random exe.
Help forums are rife with suggestions to run "curl http://pastebin.com/raw.php?i=XXXX http://pastebin.com/raw.php?i=XXXX | sh" to solve technical problems. And not fringe forums either, but forums like the official Ubuntu forums.
I've literally never heard anyone "preach that curl | sh is evil" who wouldn't/isn't saying the exact same thing about binaries.
- djm_ 12y agoI wrote this article a year ago, and you hit the nail on the head - that is what I was getting at. I didn't submit it here because it wasn't really meant for an advanced crowd, obviously most people would be aware of the dangers. For example, take a look around at the pirating world. Many sites that help you install projects such as Couchpotato, Sickbeard, Sabnzbd etc rely on people curl-piping bash scripts. The people installing from those scripts likely do not know any better.