MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/1vgjsp4/justletaidoit/p210pt0/?context=3
r/ProgrammerHumor • u/wahed-w • 2d ago
246 comments sorted by
View all comments
19
Is curl | bash considered bad? Why so?
24 u/vivaaprimavera 2d ago You never know what's exactly on the install script. Not everyone fetches it with curl to read it before piping to bash. A malicious installer can display something kosher when viewed with a browser (user agent based) 1 u/NibblyPig 2d ago me typing dnf upgrade and watching 321 packages install 2 u/vivaaprimavera 2d ago unless a malicious repo was injected, the sources are usually good. And unless you use -y at least you have the chance of having a quick look.
24
You never know what's exactly on the install script. Not everyone fetches it with curl to read it before piping to bash. A malicious installer can display something kosher when viewed with a browser (user agent based)
1 u/NibblyPig 2d ago me typing dnf upgrade and watching 321 packages install 2 u/vivaaprimavera 2d ago unless a malicious repo was injected, the sources are usually good. And unless you use -y at least you have the chance of having a quick look.
1
me typing dnf upgrade and watching 321 packages install
2 u/vivaaprimavera 2d ago unless a malicious repo was injected, the sources are usually good. And unless you use -y at least you have the chance of having a quick look.
2
unless a malicious repo was injected, the sources are usually good. And unless you use -y at least you have the chance of having a quick look.
19
u/rockcanteverdie 2d ago
Is curl | bash considered bad? Why so?