173
A sneaky demonstration of the dangers of curl bash (blog.k3can.us)
submitted 8 months ago by to c/selfhosted@lemmy.world
70 comments fedilink hide all child comments
 

I set up a quick demonstration to show risks of curl|bash and how a bad-actor could potentially hide a malicious script that appears safe.

It's nothing new or groundbreaking, but I figure it never hurts to have another reminder.

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 8 months ago (1 child)

Worse than that, the server can change it's response based on user agent so you need to curl it to a file first, a browser could be served a completely different response.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •