Hacker News Reader

`curl -o- https://example.com/install-harmless-utility.sh | sh`

Related: Detecting the use of "curl | bash" server side

https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...

You can make it so that the server returns benevolent looking code when auditing it with just "curl URL", but return malware when curl is directly piped to bash.

I.e. the correct and expected method for installing the latest version of Node.js as a package on Debian. (Except you're supposed to run it as root.)

And then there is Raspberry Pi, which recently installed a PPA and gpg key in a kernel post-install hook...

haha

I love using sites like that for my personal computer/projects, but I never copy and paste code snippets or install PPAs on work machines or computers with magic internet money on them

But do you put them on the same networks?