1. If the connection dies mid transfer, bash will still execute it.
So `rm -rf ~/.local/bin/whatever` can become `rm -rf ~`
The author can avoid this by wrapping everything in a function. But you wouldn’t know if they did so if you aren’t outputting it to a file first.
2. Say the link points to an S3 bucket and it gets compromised, there’s no record of the payload to analyze.
I’m sure there’s a plethora of other subtleties, but I’ve always had the same question as you and thought I’d share.
1. If the connection dies mid transfer, bash will still execute it.
So `rm -rf ~/.local/bin/whatever` can become `rm -rf ~`
The author can avoid this by wrapping everything in a function. But you wouldn’t know if they did so if you aren’t outputting it to a file first.
2. Say the link points to an S3 bucket and it gets compromised, there’s no record of the payload to analyze.
I’m sure there’s a plethora of other subtleties, but I’ve always had the same question as you and thought I’d share.