4 ms·
I am sorry, but I fail to see how this would be of any help. It is known that piping unknown scripts to bash is a bad thing. So when somebody decides to pipe i
by dotdi 11y ago
I am sorry, but I fail to see how this would be of any help.
It is known that piping unknown scripts to bash is a bad thing. So when somebody decides to pipe into bash, they are either (1) sure of the source or (2) completely clueless about what the hell they are doing. In case (1) there is no need for the tool, and in case (2) asking "do you really want to run this?" will not make any difference since they just typed 'curl <whatever> | sh' into their shell.
- draz 11y agoThis. What if OP inspected the script and highlighted potential harmful commands? Changes in security configurations, manipulation in critical libraries, start-up scripts, and so forth. Not sure how much that would help to the novice, but it's at least actionable (user can look the commands up and understand the implications.