I get that, but what if you recently ran sudo make-me-a-sandwich in that shell session? If someone maliciously slipped a sudo command in that script they'd have everything they needed, and you might not even realize it. Obviously, I'm not suggesting the authors of these tools, but these remote shell installers seem like they'd be obvious targets for Bad Hackers.
It seems like the whole point of these remote shell installers is to make it easier for some people, but some might not be aware of this risk.
Yes, and they should drop the pipe to bash/sh at the end of the curl command. Download it, read it, then manually run it, don't just pipe it all together.
It seems like the whole point of these remote shell installers is to make it easier for some people, but some might not be aware of this risk.