Hacker News new | ask | show | jobs
by more_corn 1284 days ago
And a complication that is bad practice because a malicious party can detect the blind handoff to shell and serve malware. e.g. wget file.sh ; vi file.sh and you get safe code curl file.sh | bash and you get malware.

This attack requires a malicious server, but it’s still bad practice.