Hacker News new | ask | show | jobs
by globular-toast 845 days ago
No, they're not the same thing! It's not piping to your shell! The shell's single purpose is to execute code. Man is not supposed to do that and it would be considered a huge security issue if it could. In any case, how would you check the downloaded file? With a text editor? Are you sure that can't result in arbitrary code execution?
1 comments

Man can run groff which can in turn run arbitrary subprocesses.