logoalt Hacker News

voidUpdate • yesterday at 7:11 AM • 2 replies • view on HN

sudo dkpg -i FileYouDownloadedFromAnywhere.deb

Replies

mDyJzDPmBdG • yesterday at 9:32 AM

Let's be real, in most cases it is:

    curl -s script.random-guy.net | sh
It is such glaring security hole that there was an old submission about filling such install script with `sleep` commands and detecting it on server side, to send different versions for downloading (and reviewing) and for actual direct execution.
➕ show 3 replies
preg_match • yesterday at 8:38 PM

Almost never occurs as the repos contain a ton of software.