News for hackers. Stuff that matters.

A comment on Detecting the use of “curl – bash” server side. Parent comment

Re:Detecting the use of “curl – bash” server side by tamana on Thursday April 21, 2016 @12:36AM (#11539724)
This assumption fails in the network connected world where a program can download custom instructions after installation.
[ Parent | on HN ]
Re:Detecting the use of “curl – bash” server side by coldtea on Thursday April 21, 2016 @02:39AM (#11540088)
It doesn't fail, it's still as usable as ever -- just not infallible, which nothing is anyway.

The dynamics of something with a larger user base being more trustworthy don't change because we're on the internet. It's a simple network (no pun intended) effect.

If the program "can download custom instructions after installation" then a large user base still means that users will be bound to find it sooner or later (and make it public/fix it) and it makes it less likely to be you (because you're 1 from 200,000 downloading it, not 1 of 20 or 200).

[ Parent | on HN ]