Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you can get the insecure bash script onto the system you can also get a bundle with a more secure downloader (or even better, the binaries to be installed) on the system in the same way. Even if you are limited to copy and pasting ASCII text, shell archives are a thing as are a myriad of other possible solutions that do not involve downloading a binary over plain HTTP without any verification.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: