"curl http://url | sh" is not evil.

Posted by burke on Friday September 07, 2012 @06:04PM
from the gist.io dept.

( 3 comments | 5 points | on HN )

Re:"curl http://url | sh" is not evil. by fdr on Friday September 07, 2012 @07:21PM (#4491671)

Also, if you add random Debian packages they are also entitled to run arbitrary programs (as root!) while installing.

The only thing wrong about this title is that it does not read "https".

[ Parent | on HN ]

Re:"curl http://url | sh" is not evil. by ssoroka on Friday September 07, 2012 @06:07PM (#4491432)

It's easy to read the url, first.

Do you read the source of all the apps you install?

[ Parent | on HN ]

Re:"curl http://url | sh" is not evil. by pyrotechnick on Saturday September 08, 2012 @12:16AM (#4492213)

"In this example, the first – the scary, evil one – is the only one using HTTPS."

git:// ~= ssh:// ~= SSL ~= HTTPS

[ Parent | on HN ]