6 ms·

https://tferdinand.net/en/why-curl-bash-is-a-dangerous-bad-habit/ https://tferdinand.net/en/why-curl-bash-is-a-dangerous-bad-h... https://www.lesinskis.com/don

by nimbius 22d ago

https://tferdinand.net/en/why-curl-bash-is-a-dangerous-bad-habit/ https://tferdinand.net/en/why-curl-bash-is-a-dangerous-bad-h... https://www.lesinskis.com/dont-pipe-curl-into-bash.html https://www.lesinskis.com/dont-pipe-curl-into-bash.html https://www.cyberhub.blog/article/25147-why-curl-pipe-bash-is-a-dangerous-security-habit https://www.cyberhub.blog/article/25147-why-curl-pipe-bash-i... oh hey lets not forget this one too https://news.ycombinator.com/item?id=47860669 https://news.ycombinator.com/item?id=47860669

ErroneousBosh 22d ago
That's nice but you can also just look at the linked github repo and inspect install.sh for yourself. It's pretty straightforward. It builds the binary for your monitoring software from the git repo, based on the architecture you're on, and if required sets up a systemd unit to kick it off on boot. It's quite nice.
dang 22d ago
Yes, I know that people repeat this a lot, but it's a generic dismissal that has nothing to do with the specifics of the project being discussed, which makes it shallow and offtopic. (Especially when taking the form of a snarky attack.) Perhaps the first 1,000 times it was mentioned, there was some juice in the lemon, but it's long gone.