“Curl Bash piping” wall of shame

Re:“Curl Bash piping” wall of shame by matt4711 on Friday October 21, 2016 @08:57PM (#12766306)

There was a post on HN a while ago where somebody wrote a server side tool which can detect curl -> bash piping and delivered different content if that happens.

[ Parent | on HN ]

Re:“Curl Bash piping” wall of shame by arcticfox on Friday October 21, 2016 @09:04PM (#12766345)

Sure, but how is that any less secure than other installation alternatives? As the site owner, I could swap out a valid package for a troll package at any moment to any subset of users I wanted to if they're not validating the contents of it...

[ Parent | on HN ]

Re:“Curl Bash piping” wall of shame by dredmorbius on Saturday October 22, 2016 @01:41AM (#12767398)

You can't change the contents on a user's local storage that they've verified.

Curlbash lets you change out offerings at will, and leaves no auditable source for the user.

[ Parent | on HN ]