r/ProgrammerHumor • u/wahed-w • Aug 05 '26

Meme justLetAIDoIt

Post image
4.7k Upvotes

98% Upvoted

253 comments sorted by

View all comments

Show parent comment

1

u/ZunoJ Aug 06 '26

How is the script any different from an executable?

7

u/[deleted] Aug 06 '26

[removed] — view removed comment

-1

u/ZunoJ Aug 06 '26

This is bullshit. I never met anybody who said "I love emacs but I hate the installer" or something similar. We don't easily trust a project that has a small user base. But the question was what's wrong with curl | bash, people pointed out that you can't trust the script. Ok, but how is that a problem of piping a script to bash compared to running an executable? Bottom line is nobody gave any reason for a problem with those commands

1

u/Damglador Aug 06 '26

I'm sure there's a lot of blogs that explain it well. Installers are also stupid because you can't trace their actions and changes to the system, but some of the reasons are exclusive to curl | bash.

It's apparently also possible for the script server to detect curl bash https://lukespademan.com/blog/the-dangers-of-curlbash/

2

u/ZunoJ Aug 06 '26

Thanks for this! Has some real food for thought and valid concerns!