Conversation

Notices

1. Aral Balkan (aral@mastodon.ar.al)'s status on Friday, 31-Mar-2023 04:18:25 JST Aral Balkan

   in reply to

   • FediForum
   • 😻MattK😻
   • Evan Prodromou

   @mattk @evan @fediforum It was https://should-i-pipe.it/ but I wouldn’t recommend using it. For one thing, no one really did and I haven’t been updating it. For another (more important reason), you can’t necessarily be sure that you’re going to get served the same content that the site does. A truly nefarious person could feed should-i-pipe.it one piece of content and everyone else something else.

   Best thing is just to view it on the repository if you trust the repository isn’t hacked :)

   • 😻MattK😻 (mattk@hostux.social)'s status on Friday, 31-Mar-2023 04:18:32 JST 😻MattK😻

     in reply to

     • FediForum
     • Evan Prodromou

     @evan @fediforum I think @aral actually made this install script checker - I don’t recall where though.

   • Evan Prodromou (evan@cosocial.ca)'s status on Friday, 31-Mar-2023 04:18:36 JST Evan Prodromou

     • FediForum

     @fediforum demo of owncast! Says Gabe Kangas, "As with any other curl-to-bash install, make sure to check your shell scripts, because, hey, you don't know me!" Too true.

     Has anyone written a good checker for install scripts so you could do something like:

     `curl http://example.com/install.sh | isthisabadidea | /bin/bash`

     ?