Re: `curl | sh` (was Re: [ann] Blog post on Luvit without Luvit)

["Soni L." <fakedme@...>]

On 06/05/16 07:01 PM, Rena wrote:
> On Fri, May 6, 2016 at 4:18 PM, Tim Caswell <tim@creationix.com 
> <mailto:tim@creationix.com>> wrote:
>
>     Also it does appear that people feel more comfortable downloading
>     a binary (I can add hash sums on the website if people bother to
>     verify).
>
>
> From best to worst:
>
> * Downloading source with hashes
> * Downloading source with no hashes
> * Downloading a binary with hashes
> * Downloading a binary with no hashes
> * Piping from the web directly into a shell
* Piping from the web directly into a root shell
> A binary is still pretty difficult to read.

--
Disclaimer: these emails may be made public at any given time, with or without reason. If you don't agree with this, DO NOT REPLY.