Except its very uncommon to be poisoned or stabbed and very common for IT systems to be hacked, because there&#x27;s a pretty big incentive to do so (setup a spamming farm, steal data, enlarge a botnet, script kiddie cred, etc).<p>&gt;Has anybody been personally burned by this?<p>I imagine a lot of devs who follow bad practices cause a lot of havok, but its up to the security and sysadmin team to clean up after them. They may not be fully aware of all their bad practices and a refrain of &quot;Let us be bad, it hasn&#x27;t caused any problems yet,&quot; is short-sighted.<p>&gt;say installing Ubuntu from a website<p>At the very least you have a SSL identified site and published checksum hashes on a separate server. That&#x27;s a far cry from a random shell script. Installing an OS is a special case anyway, so its not really a good comparison here.<p>edit: typos