The AI said "curl it and run it." Verify the SHA-256 first, and know what that does and doesn't prove
This story is from 2026-10-22. It is preserved in the archive; the latest stories are on the live feed.
Result first: I recorded the SHA-256 checksum of an installer script, then appended one line to the file. sha256sum -c printed install.sh: FAILED and WARNING: 1 computed checksum did NOT match , and exited 1 . The untouched file printed OK and exited 0. Nothing was executed in either case. curl -fs…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-22 15:43 · DEV Community — AI
The AI said "curl it and run it." Verify the SHA-256 first, and know what that does and doesn't prove