Post #4384325

Few months ago I read a blog post (I'll link it if I find it, really well written) explaining how running those 'curl ... | sh' installation commands is more dangerous than we think I mean, even opening the script's URL in the browser to check it out first is unsafe, it's fairly simple to create a server that shows you a legit script when seen in the browser and a malicious one when fetched with curl So today I came out with this stupid simple script to help make this process safe a little easier. It's called `shelp`, and all you do is replace `sh`, `bash`, `fish`, etc. with `shelp`, `bashelp`, `fishelp`... The script will then show you the program you're about to execute, then ask you if you actually want to run it It's a very small and stupid bash script but I guess it can be useful for some people https://codeberg.org/Malasaur/shelp