I set up a quick demonstration to show risks of curl|bash and how a bad-actor could potentially hide a malicious script that appears safe.

It’s nothing new or groundbreaking, but I figure it never hurts to have another reminder.

  • axx@slrpnk.net
    link
    fedilink
    English
    arrow-up
    2
    ·
    3 hours ago

    No, it is different, as it adds an entire layer of indirection and unknown to the mix, increasing the risk in the process.