• 1 Post
  • 44 Comments
Joined 3 年前
cake
Cake day: 2023年7月1日

help-circle





  • I think they mean using curl to grab something and piping the output to bash so it it executed locally.

    And it is pretty common. Things like ohmyzsh use it. I find it scary because you’re running things direct from the web without any package signature architecture. I would trust the omz people but what if their GitHub was compromised? But don’t check any of the source? No. I don’t anyway, but with a bit of fear :/