this post was submitted on 31 Aug 2025
114 points (99.1% liked)

Selfhosted

51049 readers
2108 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

I only discovered this recently, and it's very handy.

Piping scripts directly to bash is a security risk. You can always download the scripts, inspect them and run locally if you so choose.

you are viewing a single comment's thread
view the rest of the comments
[–] deafboy@lemmy.world 12 points 1 day ago (1 children)

Piping scripts directly to bash is a security risk

Nobody has ever explained why. What is the difference between executing a script directly from curl, and adding a repository which downloads a package which contains a script.

[–] atzanteol@sh.itjust.works 6 points 1 day ago (1 children)

The URL can point to a different file. People can post maliciously similar URLs and trick you into running something else.

With a repository you have some semblance of "people have looked at this before". Packages are signed and it will provide a standard way to uninstall and upgrade in the future.

There's literally no good reason to replace it with a shell script on a website.

[–] splendoruranium@infosec.pub 3 points 23 hours ago

There’s literally no good reason to replace it with a shell script on a website.

I fully agree that a package manager repository with all those tools would be preferable, but it doesn't exist, does it? I mean... content is king. If the only way to get a certain program or functionality is a shell script on a website, then of course that's what is going to be used.