No. With a curl install, you cannot audit the source. You cannot know if you hav... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

noja on March 13, 2017 | parent | context | favorite | on: Pi-hole – A black hole for Internet advertisements

No. With a curl install, you cannot audit the source. You cannot know if you have been served the same content as someone else.

You cannot look at version history, check a signed package, etc. etc.

If someone wants to root just a few select machines, you would want people to do a curl install.

Gaelan on March 14, 2017 [–]

If you're going to manually audit the source, you can curl into a file then run bash on it. If you're not going to read the code anyway, there's no harm in curl|bash.

noja on March 14, 2017 | [–]

Yes there is, there's a lot of harm, see my comment above.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact