There is even timing server side attack exploiting "curl |bash" recently posted ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

nefariousoctopi on May 25, 2016 | parent | context | favorite | on: Nix as OS X Package Manager

There is even timing server side attack exploiting "curl |bash" recently posted on HN [1].

[1]: https://news.ycombinator.com/item?id=11532599

chrismonsanto on May 26, 2016 [–]

This is an irrelevant "attack." If you don't trust the site to serve you a safe installer, then you shouldn't trust the site to serve you a safe program either. Do you regularly verify the entire source code of programs you install?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact