but since you are curling a web URL straight to sh you will never know. which is... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		rieogoigr 53 days ago \| parent \| context \| favorite \| on: Uv is the best thing to happen to the Python ecosy... but since you are curling a web URL straight to sh you will never know. which is the problem.

bmicraft 53 days ago | [–]

But it's not if you trust the url and curl has `--proto '=https' --tlsv1.2` as args

oblio 53 days ago | [–]

What about running a downloaded binary installer? What if the URL is HTTPS?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact