Hacker News new | ask | show | jobs
by jethro_tell 3915 days ago
and also from extra steps between curl and bash. Which is the whole point in the first place. If you are going right through a pipe and letting the script verify itself then what's the point.

Are you the guy I'm looking for? YES! --> Seems trustworthy.

1 comments

No the bash script doesn't verify itself. The only real verification step is using https (and writing the script so that it's not vulnerable to truncation attacks).