install-scripts icon indicating copy to clipboard operation
install-scripts copied to clipboard

Who's behind https://dotnet-install.sh ?

Open nodakai opened this issue 2 years ago • 7 comments
trafficstars

It seems to download a version of the script that appears to be outdated compared to the official one. Is this possibly a preparation for a bait-and-switch tactic, or could it just be a well-intentioned effort to provide a convenient shortcut for the community?

https://dotnet-install.sh

https://who.is/whois/dotnet-install.sh

nodakai avatar Nov 23 '23 06:11 nodakai

This looks fishy. Please, download scripts only from Microsoft domains. We now support GPG detached signing so you can check integrity of the file before you execute it.

MichalPavlik avatar Nov 23 '23 13:11 MichalPavlik

Where did you find that link?

The only valid alias for that file is https://dot.net/v1/dotnet-install.sh. Now that we only have one version, we could even just shorten the alias.

mairaw avatar Nov 23 '23 16:11 mairaw

I attempted to revisit the official reference documentation for the script I had read before. I typed dotnet-install.sh into Firefox's address bar, expecting it to either bring up the relevant page from my browsing history or default to a Google search if the phrase wasn't found. Firefox recognized it as a domain name and, to my surprise, displayed a script

nodakai avatar Nov 24 '23 04:11 nodakai

The same thing happened to me, I was trying to search for information about dotnet-install.sh, and in my case, Chrome recognized it as a file and downloaded it. It is easy to fall in to this trap, I was trying to search for information and downloaded an unknown .sh file from the internet.

kubilayeldemir avatar Nov 24 '23 09:11 kubilayeldemir

Gotcha. Thanks for the additional context! Was just trying to understand if there were any sites promoting this other domain.

mairaw avatar Nov 28 '23 04:11 mairaw

Do we have any updates on this ticket?

YuliiaKovalova avatar Apr 10 '24 08:04 YuliiaKovalova

FYI:

.sh | country-code | Government of St. Helena The registrar is NAMECHEAP The NS is hosted by CLOUDFLARE A[AAA] records resolve to IPs in AS13335 CLOUDFLARENET Source: https://www.nslookup.io/domains/dotnet-install.sh/dns-records/

ArwynFr avatar Aug 15 '24 12:08 ArwynFr