Ok. Someone posed a scenario where an attacker uses the User-Agent to differentiate between a victim vetting the URL via a regular browser and someone using curl&#x2F;wget to pipe it to the shell. I suggested a <i>simple</i> solution to this specific scenario.<p>There are <i>any number</i> of scenarios where any given solution could be broken. Why not point out that you OS might be compromised and the wget&#x2F;curl binary that you&#x27;re using is patched to present the wrong information to you?