173
A sneaky demonstration of the dangers of curl bash (blog.k3can.us)
submitted 8 months ago by to c/selfhosted@lemmy.world
70 comments fedilink hide all child comments
 

I set up a quick demonstration to show risks of curl|bash and how a bad-actor could potentially hide a malicious script that appears safe.

It's nothing new or groundbreaking, but I figure it never hurts to have another reminder.

you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 8 months ago (1 child)

Oh, people will keep using it no matter how much you warn them.

Proxmox-helper-scripts is a perfect example. They'll agree with you until that site comes up, and then its "it'll never, ever get hacked and subverted, nope, can't happen, impossible".

Wankers.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 1 point 8 months ago* (last edited 8 months ago)

    I was looking at that very thing last night.

    But then I realized, "why can't immich just create usable packages like we had before?" and noped back out.

    But, for a moment, I was sure a little inspection and testing would make the Internet equivalent of NYC MTA coin-sucking magically safe. It looked so eeeeasy.

  • permalink
  • fedilink
  • source
  • parent