{"action":"created","issue":{"url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/566","labels_url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/566/labels{/name}","comments_url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/566/comments","events_url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/566/events","html_url":"https://github.com/mail-in-a-box/mailinabox/issues/566","id":108985508,"number":566,"title":"curl|sudo bash antipattern","user":{"login":"allo-","id":1482341,"avatar_url":"https://avatars.githubusercontent.com/u/1482341?v=3","gravatar_id":"","url":"https://api.github.com/users/allo-","html_url":"https://github.com/allo-","followers_url":"https://api.github.com/users/allo-/followers","following_url":"https://api.github.com/users/allo-/following{/other_user}","gists_url":"https://api.github.com/users/allo-/gists{/gist_id}","starred_url":"https://api.github.com/users/allo-/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/allo-/subscriptions","organizations_url":"https://api.github.com/users/allo-/orgs","repos_url":"https://api.github.com/users/allo-/repos","events_url":"https://api.github.com/users/allo-/events{/privacy}","received_events_url":"https://api.github.com/users/allo-/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-09-30T00:16:14Z","updated_at":"2015-09-30T00:27:07Z","closed_at":"2015-09-30T00:27:07Z","body":"On your documentation page you write\r\n\r\n```(bash)\r\ncurl -s https://mailinabox.email/bootstrap.sh | sudo bash\r\n```\r\n\r\nWhich is a big antipattern for security, see for example http://blog.emillon.org/posts/2014-12-27-on-the-curl-sh-pattern.html\r\n\r\nBeside this, even copy & paste from a website is a big security risk: http://thejh.net/misc/website-terminal-copy-paste"},"comment":{"url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/comments/144227888","html_url":"https://github.com/mail-in-a-box/mailinabox/issues/566#issuecomment-144227888","issue_url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/566","id":144227888,"user":{"login":"JoshData","id":445875,"avatar_url":"https://avatars.githubusercontent.com/u/445875?v=3","gravatar_id":"","url":"https://api.github.com/users/JoshData","html_url":"https://github.com/JoshData","followers_url":"https://api.github.com/users/JoshData/followers","following_url":"https://api.github.com/users/JoshData/following{/other_user}","gists_url":"https://api.github.com/users/JoshData/gists{/gist_id}","starred_url":"https://api.github.com/users/JoshData/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JoshData/subscriptions","organizations_url":"https://api.github.com/users/JoshData/orgs","repos_url":"https://api.github.com/users/JoshData/repos","events_url":"https://api.github.com/users/JoshData/events{/privacy}","received_events_url":"https://api.github.com/users/JoshData/received_events","type":"User","site_admin":false},"created_at":"2015-09-30T00:27:07Z","updated_at":"2015-09-30T00:27:07Z","body":"Like most things in life, there is a trade-off involved in the different ways the software can be acquired.\r\n\r\nFor copying and pasting from the website... It's turtles all the way down. At some point the user has to find the instructions from somewhere. But at least the website will be in the Chrome HSTS preload list in Chrome's next update.\r\n\r\nThis is sort of a dup of #250, so I'm closing this. Feel free to open new issues for specific proposals for how to make things better."}}