Orca 🌻 | 🎀 | 🪁 | 🏴🏳️‍⚧️ on Nostr: `curl | bash` (It's `python` but whatever) works fine if one trusts the web server it ...

`curl | bash` (It's `python` but whatever) works fine if one trusts the web server it curl'd. For example, if someone is installing a toolchain and would download the toolchain from that same server anyway, `curl |bash` would be fine as it didn't *trust* more entities it would have with alternative means.
(Of course blindly curl|bash is a thing and I won't argue that's indeed bad)
But that copy[dot]fail website which seems extremely AI-pilled? ... 😬

Also that python script seems extremely obfuscated and unreadable (*). That's probably intended to support the claim of "732-byte Python script"... Haha as if how few lines of code a PoC have means anything outstanding right 🙃 Deeply unserious people.

(*) after I downloaded it from Github. I don't trust Microsoft very much but I have not heard that Microsoft has ever served targetted malware to people downloading things from Github either.