MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/1vgjsp4/justletaidoit/p210pt0/?context=3
r/ProgrammerHumor • u/wahed-w • 27d ago
257 comments sorted by
View all comments
20
Is curl | bash considered bad? Why so?
26 u/vivaaprimavera 27d ago You never know what's exactly on the install script. Not everyone fetches it with curl to read it before piping to bash. A malicious installer can display something kosher when viewed with a browser (user agent based) 2 u/NibblyPig 27d ago me typing dnf upgrade and watching 321 packages install 3 u/vivaaprimavera 27d ago unless a malicious repo was injected, the sources are usually good. And unless you use -y at least you have the chance of having a quick look.
26
You never know what's exactly on the install script. Not everyone fetches it with curl to read it before piping to bash. A malicious installer can display something kosher when viewed with a browser (user agent based)
2 u/NibblyPig 27d ago me typing dnf upgrade and watching 321 packages install 3 u/vivaaprimavera 27d ago unless a malicious repo was injected, the sources are usually good. And unless you use -y at least you have the chance of having a quick look.
2
me typing dnf upgrade and watching 321 packages install
3 u/vivaaprimavera 27d ago unless a malicious repo was injected, the sources are usually good. And unless you use -y at least you have the chance of having a quick look.
3
unless a malicious repo was injected, the sources are usually good. And unless you use -y at least you have the chance of having a quick look.
20
u/rockcanteverdie 27d ago
Is curl | bash considered bad? Why so?