I set up a quick demonstration to show risks of curl|bash and how a bad-actor could potentially hide a malicious script that appears safe.
It’s nothing new or groundbreaking, but I figure it never hurts to have another reminder.
I set up a quick demonstration to show risks of curl|bash and how a bad-actor could potentially hide a malicious script that appears safe.
It’s nothing new or groundbreaking, but I figure it never hurts to have another reminder.
Curl bash is no different than running an sh script you dont know manually…
No, it is different, as it adds an entire layer of indirection and unknown to the mix, increasing the risk in the process.
True, but this is specifically about scripts you think you know, and how curl bash might trick you into running a different script entirely.