Don't tell people to curl things into bash, seriously

sammacbeth / dat-fox

dat:// protocol as a Firefox webextension

MIT License

250 stars 12 forks source link

Don't tell people to curl things into bash, seriously #30

Closed raingloom closed 5 years ago

raingloom commented 5 years ago

It's a widely known security vulnerability and is a horrible idea. Also doesn't help when the script fails and you need to debug it.

Just.... don't do it. At all. Ever.

edrex commented 5 years ago

It's the same trust level as downloading the software directly, as long as the link is https. Users savvy enough to want to read the script first can easily modify the command to do so.