• 1 Post
  • 43 Comments
Joined 3 years ago
cake
Cake day: July 1st, 2023

help-circle




  • I think they mean using curl to grab something and piping the output to bash so it it executed locally.

    And it is pretty common. Things like ohmyzsh use it. I find it scary because you’re running things direct from the web without any package signature architecture. I would trust the omz people but what if their GitHub was compromised? But don’t check any of the source? No. I don’t anyway, but with a bit of fear :/