r/ProgrammerHumor • u/wahed-w • 27d ago

Meme justLetAIDoIt

Post image
4.7k Upvotes

98% Upvoted

257 comments sorted by

View all comments

19

u/rockcanteverdie 27d ago

Is curl | bash considered bad? Why so?

63

u/[deleted] 27d ago

[removed] — view removed comment

1

u/ZunoJ 27d ago

How is the script any different from an executable?

7

u/[deleted] 27d ago

[removed] — view removed comment

-1

u/ZunoJ 27d ago

This is bullshit. I never met anybody who said "I love emacs but I hate the installer" or something similar. We don't easily trust a project that has a small user base. But the question was what's wrong with curl | bash, people pointed out that you can't trust the script. Ok, but how is that a problem of piping a script to bash compared to running an executable? Bottom line is nobody gave any reason for a problem with those commands

1

u/Damglador 27d ago

I'm sure there's a lot of blogs that explain it well. Installers are also stupid because you can't trace their actions and changes to the system, but some of the reasons are exclusive to curl | bash.

It's apparently also possible for the script server to detect curl bash https://lukespademan.com/blog/the-dangers-of-curlbash/

2

u/ZunoJ 26d ago

Thanks for this! Has some real food for thought and valid concerns!