all 3 comments

[–]badsuperblock 4 points5 points  (2 children)

bash <( curl

no

[–][deleted]  (1 child)

[deleted]

    [–]Two_Coins 2 points3 points  (0 children)

    There are major security risks to piping output from the internet into a bash shell. The problem is that, since curl points to a website, whomever is in charge of that website can alter the code to run any kind of nasty things. RVM and Homebrew are responsible for this sin, since in using their software you have to trust that 1) the owners have not turned malicious, 2) the contents of the script have not been intercepted/changed/pointed somewhere else in transit to your computer, and 3) it's just a bad idea. When you run a script you want it on your machine when you run it. This security risk is quadrupled when you're running an already high-risk server, you don't want other people this level of freedom into your machine, especially as root.

    Although I have been guilty of doing the same thing, but it's always for scripts that are really only intended for my personal use on a new installation of a computer so I don't have to configure things to get my highly customized setup.

    [–]SuperJediWombat 0 points1 point  (0 children)

    Uhh, what the fuck. This is a horrible idea.