3 ms·
Would something like curl http://google.com/keylogger.sh > temp.sh && sh temp.sh work?
by Igglyboo 12y ago
Would something like
curl http://google.com/keylogger.sh > temp.sh && sh temp.sh
work?
- sarciszewski 12y agoMore like: curl http://google.com/keylogger.sh http://google.com/keylogger.sh > temp.sh less temp.sh # actually read the fucking thing sh temp.sh rm temp.sh
- edwintorok 12y agoI'd also check at least the size, and checksum/GPG signature if available.
- dllthomas 12y agoIt avoids that particular problem, yes. It is still inadvisable to do it over http, and checking a digital signature might be even better. Looking at the results might be better still if you have the expertise, though at that point it is more or less isomorphic what everyone happily does in trusting repositories, make files in signed source tarballs, and similar.