• grue@lemmy.world
    link
    fedilink
    arrow-up
    12
    ·
    2 days ago

    Yeah, if you’re doing some sort of curl | sh nonsense you’d better trust whoever is supplying that script implicitly. On the bright side, I’ve only ever seen that on the first-party website of the project being installed, so it could be worse.