Hacker News new | ask | show | jobs
by SOLAR_FIELDS 698 days ago
Yeah, the piping to bash is a tried and true method for various installers. People make a fuss about it, but we don’t see people getting owned that way often. I think with bash installers though it’s pretty trivial to just visit the link and read through the 100 lines of bash. So anything installed this way should be as simple as visiting the link and reading a short amount of code imo
1 comments

The same people seem to be more OK with installing random .debs and .rpms which can of course arbitrarily run any code with root.