News for hackers. Stuff that matters.

A comment on “Curl Bash piping” wall of shame. Parent comment

Re:“Curl Bash piping” wall of shame by arcticfox on Friday October 21, 2016 @09:04PM (#12766345)
Sure, but how is that any less secure than other installation alternatives? As the site owner, I could swap out a valid package for a troll package at any moment to any subset of users I wanted to if they're not validating the contents of it...
[ Parent | on HN ]
Re:“Curl Bash piping” wall of shame by dredmorbius on Saturday October 22, 2016 @01:41AM (#12767398)
You can't change the contents on a user's local storage that they've verified.

Curlbash lets you change out offerings at will, and leaves no auditable source for the user.

[ Parent | on HN ]