I set up a quick demonstration to show risks of curl|bash and how a bad-actor could potentially hide a malicious script.

It’s nothing new or groundbreaking, but I figure it never hurts to have another reminder.

  • mrnobody@reddthat.com
    link
    fedilink
    English
    arrow-up
    8
    ·
    5 hours ago

    The reality is a lot of newcomers to Linux won’t even understand the risks involved, it’s run because that’s what they’re told or shown to do. That’s what I did for pihole many years ago too, I’ll admit

    • atzanteol@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      5
      ·
      4 hours ago

      I’ve been accused of “gate keeping” when I tell people that this is a shitty way to deploy applications and that nobody should do it.