Skip to content

Comment on "So that a truncated partial download doesn't end up executing half a script"parent

Comments

Everyone says this, but nearly nobody does it.

Just like security through open source, it's more a nice myth than a reality.

I do it; I like messing with install scripts and optimize them. My next big yak shaving project will be to optimize rkhunter. Did you know it is a 20K line POSIX shell script? I read through it a couple of times, and there's significant potential for improvement both in performance and in its security. For me it's a lot of fun because I like programming in Bourne-derived shells.

I skim little python or bash scripts when I download them. It depends on the project. (I try not to download much source code because this is a pain to do).

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.