curl is only the sandbox if you don't then do anything with the byte stream.
replyPipe it to bash? game over
Pipe it to less/more? Better hope your distro keeps those patched
Open the file in a browser or PDF reader? Hey, look at all this shiny new attack surface!
How do you set up the sandbox without having downloaded anything from the internet? I guess there’s still places where you can buy Linux CDs.
reply