In-reply-to » I can't believe software developers are still trying to get people to do curl | sh. It's easy to miss the problem if you're still in the mindset of Windows software distribution, but these people are writing software on GNU/Linux, for GNU/Linux. You would think they'd realize that this is never a good idea.

@movq@www.uninformativ.de It’s possible for a Web server to detect whether or not you’re piping the output into a shell and change its output based on that, which makes curl | sh so much worse in my opinion.

https://web.archive.org/web/20240311094552/https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/

⤋ Read More