You must log in or # to comment.
This doesn’t pass the smell test.
- Instructs to pipe the output of
curl
insh
- Assumes that
sh
isbash
[1] - “Community” behind it is apparently originating in Berlin, and is now a “nonprofit foundation in Switzerland”, but has no publicly disclosed legal structure anymore.
- “Community” behind it uses discord, but not revolt, matrix, simplex or others.
- “Community” behind it uses twitter, but not mastodon.
- Cryptobros.
sh <(curl -sSf https://url.redacted/script)
↩︎
Installing by piping from curl is pretty common and not a red flag in and of itself. Even Rust is installed this way. If you don’t trust the URL, you also shouldn’t trust any binary installers downloaded from that website.
Rust is a red flag
Why?
- Instructs to pipe the output of