Comment

Comment by spoonfeeder006

>Alternatively if you don't trust this approach, you can download the latest release binary

Is there a security difference between running a shell script that runs a binary vs running a binary directly? Or downloading a executable from the browser vs downloading a shell script using curl?

I get that running the shell script can subjectively look more scary, but doesn't it just basically reveal the inherent danger of running an exe anyhow, assuming there's no code signing keys involved?

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton