Hacker News new | ask | show | jobs
by sac2171 3652 days ago
That doesn't always work, and is still quite dangerous in the (abstract), usually your other programmers are friendly, but you should definitely be careful about it.

Proof of concept: https://jordaneldredge.com/blog/one-way-curl-pipe-sh-install...

2 comments

The idea is that you download the script, read through the downloaded file, then run the downloaded file. Obviously if you download it two different times the server can serve you two different versions.
Ah interesting, thanks for sharing that