logoalt Hacker News

ueckerlast Sunday at 12:52 PM1 replyview on HN

I think it has a lot to do with "curl|bash". Cut&paste a curl|bash command-line disables all inherent mechanisms and stumbling blocks that would ensure properly ensuring trust. It was basically invented to make it easy to install software by circumventing all protection a Linux distribution would traditionally provide. It also eliminates all possibility for independent verification about what was installed or done on the machine.


Replies

IshKebablast Sunday at 1:21 PM

Downloading and installing a `.deb` or `.rpm` is going to be no more secure. They can run arbitrary scripts too.

show 1 reply