▲ 173 ▼ A sneaky demonstration of the dangers of curl bash (blog.k3can.us) submitted 8 months ago by K3can@lemmy.radio to c/selfhosted@lemmy.world 70 comments fedilink hide all child comments I set up a quick demonstration to show risks of curl|bash and how a bad-actor could potentially hide a malicious script that appears safe. It's nothing new or groundbreaking, but I figure it never hurts to have another reminder.
[–] axx@slrpnk.net 2 points 8 months ago (1 child) It is, see https://github.com/m4tx/curl-bash-attack permalink fedilink source parent hideshow 1 child comment replies: [–] Dave@lemmy.nz 1 point 8 months ago That's an interesting proof of concept, but I don't think it shows it's different. That's a server side attack, whoever has control of the server could just have the script download a malicious binary instead and you wouldn't be able to tell from the script. permalink fedilink source parent
[–] Dave@lemmy.nz 1 point 8 months ago That's an interesting proof of concept, but I don't think it shows it's different. That's a server side attack, whoever has control of the server could just have the script download a malicious binary instead and you wouldn't be able to tell from the script. permalink fedilink source parent