logoalt Hacker News

t-writescode • today at 2:18 AM • 1 reply • view on HN

A big difference between the safety of "next > next > next > finish" and "curl | bash" is one of them is dynamically loaded from an external source that could change between runs, and the other can be fully downloaded and vetted in a single check, and then once it's safe, it's probably safe 10 years from now.


Replies

nailer • today at 2:41 AM

Every download of a piece of software could be unique.

➕ show 1 reply