logoalt Hacker News

Animatstoday at 7:16 AM4 repliesview on HN

The install procedure, for something that's supposed to be a security product:

    curl -sL https://dl.jitpass.com/jitpass/jit/releases/latest/download/jitpass_darwin_arm64.tar.gz | tar -xz jit
    sudo mv jit /usr/local/bin/
What could possibly go wrong?

Replies

jason1chotoday at 8:03 AM

I agree that `curl | tar && mv` is not safer than `curl | sh`.

thecopytoday at 7:23 AM

What is wrong with it?

show 2 replies
bukershoktoday at 7:46 AM

[dead]