Don't copy paste from a website to a terminal

Re:Don't copy paste from a website to a terminal by coldtea on Thursday November 12, 2015 @01:23PM (#10555052)

>The problem is that there's a lot of software out there that expects you to install it this way - particularly by piping into sh or bash or the like.

The real problem is that this is nothing different than trusting a binary download -- which many more millions (billions) do.

[ Parent | on HN ]

Re:Don't copy paste from a website to a terminal by syntheticnature on Thursday November 12, 2015 @03:08PM (#10555746)

Or, for that matter, a source download. Or one you've hashed (how do you know the hash hasn't been tampered with?), a microprocessor (have you looked at the microcode? the masks), a circuit, etc.

Turtles^H^H^H^H^H^H^HTrust all the way down.

I'm not being entirely facetious, either, given the advice about disposing of electronics after visiting certain countries.

[ Parent | on HN ]