From the top comments it seems like we're skipping the fact that the guy has automatic updates turned off and it's pulling down and execing arbitrary code anyway.