I'm getting tired of explaining to people why downloading some arbitrary text file (script) from the internet with curl or wget or whatever and executing it with bash or some other script interpreter is a bad idea even if that's what some program's developer tells you to do.
People tend to understand without much difficulty that downloading and running random binaries is not a good idea, but there's an extraordinary blind-spot when it comes to scripts (and so-called "config" files that are intended to be downloaded and then sourced in bash to set some variables). This is especially true for J. Random Developer's magic installer script.
I was hoping to find a good question with answers here that I could link to when necessary, but couldn't find one.
Anyone know of any good resources - blog posts, Q&A sites, whatever - that specifically address this topic?
I'd especially like to see resources explaining to developers why telling their users to do that is dangerously irresponsible.