Hacker News new | ask | show | jobs
by wired_devil 3680 days ago
Take a look at the install script. It's not so complicated, pretty much only download a tar.gz. So why using curl?
2 comments

Did you know that a malicious server can detect if you are piping to a shell and serve a completely different thing? D:
How so? By looking for a curl UA?
No. The shell is slower processing the download. You can detect this on the server. See https://news.ycombinator.com/item?id=11532599
> It's not so complicated, pretty much only download a tar.gz. So why using curl?

Because it goes further than just downloading a .tar.gz. It checks your OS and its dependencies; download the right tarball; check it has an install script; run the install script.