30 ms·

Bashfill – art for your terminal

134 points by yankcrime 9y ago

matt-attack 9y ago
Neat! Just wish I could draw something worth while...
deleted 9y ago
[deleted]
chowes 9y ago
Pretty cool. Just a thought - maybe add an endpoint directly to the shell script? Would be cool to be able to simply `curl max.io/...` and see it
- comboy 9y ago
  Please don't. Why would you want that. Do you really want to put trust in another 3rd party (even if author is great, site can be compromised), just to see some colors in your terminal? I don't see how do we solve this problem by the way. Most people will always choose convenience over security. And they, as a user, must have some privileges. Even if you ask, they will just go ahead and say yes to get their thing. I understand that. Is there some clever technical fix for this, or do ransomware need to get popular enough to increase users security awareness? It seems to be a really hard problem. edit: Oh, I'm not very clever, no execution necessary here, just an output from curl. Realized that just after I sent it, but I'm leaving the reply for the second OT part.
  - philtar 9y ago
    I choose convenience over security. And so do you. You didn't read every line of every software you use,because it's not convenient.
    - deleted 9y ago
      [deleted]
  - yzmtf2008 9y ago
    This is a discussion that’s been had before and a problem that’s been solved before: https://sandstorm.io/news/2015-09-24-is-curl-bash-insecure-pgp-verified-install https://sandstorm.io/news/2015-09-24-is-curl-bash-insecure-p... As a gist, here’s a quote: When you install software on Linux, no matter what package manager you use, you are giving that software permission to act as you.
    - saghm 9y ago
      Most (if not all) legit package managers at least use checksums to reduce the chance of malicious packages getting installed; I'm not sure about others, but I believe pacman (the Arch Linux package manager) also refuses to install packages from unless you've imported the GPG key of the distributor. This isn't to say that package managers are completely safe (nothing is), but there are fairly significant differences between using a Linux package manager and piping a script from the internet to be executed.
      - ue_ 9y ago
        The owner of the website could sign responses, and you could verify them, in addition to TLS via HTTPS. I think that can make it at least as secure as package management systems.
        saghm 9y ago
        Yep, I agree. Providing checksums for scripts to curl isn't the the norm from what I've seen, though, which I think fits in with what GP (of my original comment) was saying. Also, I'm not super convinced that most users would bother verifying the checksum; from what I've seen, most people downloading Linux distro images don't even bother verifying the checksums that are provided.
        JeremyBanks 9y ago
        I'd be great if something like hashpipe could become standard on Linux for this purpose. See https://news.ycombinator.com/item?id=9318286 https://news.ycombinator.com/item?id=9318286
  - olalonde 9y ago
    Kind of unrelated but I wish I could do `curl http://example.com/evil-script.sh http://example.com/evil-script.sh | vim | bash` and have vim stop the pipe if I :q! or proceed to forward stdin to stdout if I :wq.
    - spb 9y ago
      That's what `vipe` is for: https://joeyh.name/code/moreutils/ https://joeyh.name/code/moreutils/
    - deleted 9y ago
      [deleted]
- binarymax 9y ago
  I thought about that, but then I'd need to support it server side, and right now it's just a static page. For convenience I made you this (requires node): https://github.com/binarymax/bashfill/blob/master/zip2bash.js https://github.com/binarymax/bashfill/blob/master/zip2bash.j... So you can run './zip2bash.js $somebashfillurl | bash' to light it up.
gourneau 9y ago
Very cool, can we have image import feature too :)
- Tenzer 9y ago
  Perhaps you can use my command line image printer for something like that: https://github.com/Tenzer/explosion https://github.com/Tenzer/explosion.
- hk__2 9y ago
  You might be interested by img2txt (https://github.com/hit9/img2txt https://github.com/hit9/img2txt) or libcaca (http://caca.zoy.org/wiki/libcaca http://caca.zoy.org/wiki/libcaca). There are a lot of resources in this old HN thread too: https://news.ycombinator.com/item?id=7776112 https://news.ycombinator.com/item?id=7776112
owendaniel 9y ago
pretty cool, can you make the blocks smaller though improve detail?
- hk__2 9y ago
  You can’t. It uses characters for pixels so you have either scale up your terminal or use a graphical image display.
  - irth 9y ago
    You can use braille unicode characters for sub-character dots as in https://github.com/rastapasta/mapscii https://github.com/rastapasta/mapscii
    - hk__2 9y ago
      Yes but you can’t use different colors for different dots in the same character.
- __jal 9y ago
  That would be interesting, but first you'd have to write a new terminal type. And then there would be... another step or two.
- binarymax 9y ago
  If you know that you'll be zoomed way out, and have a big screen, you can fork it and change the dimensions. Terms are 80x23. I made it 40x23 to get squareish blocks. Feel free to go crazy with the dimensions and try it out.
SEJeff 9y ago
For some pretty art on your terminal (this command isn't going to delete anything): yes "$(seq 231 -1 16)" | while read i; do printf "\x1b[48;5;${i}mHi $USER\n"; sleep .02; done Warning: pretty psychedelic colors ^^
- akgerber 9y ago
  One can always open run this in bash running in a Docker image like so: docker run -it ubuntu /bin/bash
  - SEJeff 9y ago
    True, but remember the wise words of Dan Walsh "Containers Don't Contain" in that if you run as root inside of a container without careful consideration, bad users can absolutely break out, just like in a chroot. http://www.projectatomic.io/blog/2016/01/how-to-run-a-more-secure-non-root-user-container/ http://www.projectatomic.io/blog/2016/01/how-to-run-a-more-s... http://www.projectatomic.io/blog/2014/09/yet-another-reason-containers-don-t-contain-kernel-keyrings/ http://www.projectatomic.io/blog/2014/09/yet-another-reason-... In newer docker, the defaults are really good, but even then, it is worth reading up.
    - akgerber 9y ago
      Interesting. Thank you.
pixelbeat__ 9y ago
If you want to generate html, say for converting to an email you can use http://www.pixelbeat.org/scripts/ansi2html.sh http://www.pixelbeat.org/scripts/ansi2html.sh For example: your_script | ansi2html.sh --bg=dark > blah.html or your_script | ansi2html.sh | mail -a "Content-Type: text/html" Your@email.com
binarymax 9y ago
Howdy all. I posted this on lobste.rs and it kinda took off. Glad to see it here again after all these years. Ask me anything. And feature/pull requests can be made here: https://github.com/binarymax/bashfill https://github.com/binarymax/bashfill Happy bashfilling!
Lorin 9y ago
Here's a piece I threw together - Stormy beach, use as you may. https://max.io/bash.html?zip=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 https://max.io/bash.html?zip=eDE1eTF4MjRlMXgzeTF4MzB5MXg1ZTF...

134 points by yankcrime 9y ago

matt-attack 9y ago

Neat! Just wish I could draw something worth while...

deleted 9y ago

[deleted]

chowes 9y ago

Pretty cool. Just a thought - maybe add an endpoint directly to the shell script? Would be cool to be able to simply `curl max.io/...` and see it

comboy 9y ago
Please don't. Why would you want that. Do you really want to put trust in another 3rd party (even if author is great, site can be compromised), just to see some colors in your terminal? I don't see how do we solve this problem by the way. Most people will always choose convenience over security. And they, as a user, must have some privileges. Even if you ask, they will just go ahead and say yes to get their thing. I understand that. Is there some clever technical fix for this, or do ransomware need to get popular enough to increase users security awareness? It seems to be a really hard problem. edit: Oh, I'm not very clever, no execution necessary here, just an output from curl. Realized that just after I sent it, but I'm leaving the reply for the second OT part.
- philtar 9y ago
  I choose convenience over security. And so do you. You didn't read every line of every software you use,because it's not convenient.
  - deleted 9y ago
    [deleted]
- yzmtf2008 9y ago
  This is a discussion that’s been had before and a problem that’s been solved before: https://sandstorm.io/news/2015-09-24-is-curl-bash-insecure-pgp-verified-install https://sandstorm.io/news/2015-09-24-is-curl-bash-insecure-p... As a gist, here’s a quote: When you install software on Linux, no matter what package manager you use, you are giving that software permission to act as you.
  - saghm 9y ago
    Most (if not all) legit package managers at least use checksums to reduce the chance of malicious packages getting installed; I'm not sure about others, but I believe pacman (the Arch Linux package manager) also refuses to install packages from unless you've imported the GPG key of the distributor. This isn't to say that package managers are completely safe (nothing is), but there are fairly significant differences between using a Linux package manager and piping a script from the internet to be executed.
    - ue_ 9y ago
      The owner of the website could sign responses, and you could verify them, in addition to TLS via HTTPS. I think that can make it at least as secure as package management systems.
      - saghm 9y ago
        Yep, I agree. Providing checksums for scripts to curl isn't the the norm from what I've seen, though, which I think fits in with what GP (of my original comment) was saying. Also, I'm not super convinced that most users would bother verifying the checksum; from what I've seen, most people downloading Linux distro images don't even bother verifying the checksums that are provided.
        JeremyBanks 9y ago
        I'd be great if something like hashpipe could become standard on Linux for this purpose. See https://news.ycombinator.com/item?id=9318286 https://news.ycombinator.com/item?id=9318286
- olalonde 9y ago
  Kind of unrelated but I wish I could do `curl http://example.com/evil-script.sh http://example.com/evil-script.sh | vim | bash` and have vim stop the pipe if I :q! or proceed to forward stdin to stdout if I :wq.
  - spb 9y ago
    That's what `vipe` is for: https://joeyh.name/code/moreutils/ https://joeyh.name/code/moreutils/
  - deleted 9y ago
    [deleted]
binarymax 9y ago
I thought about that, but then I'd need to support it server side, and right now it's just a static page. For convenience I made you this (requires node): https://github.com/binarymax/bashfill/blob/master/zip2bash.js https://github.com/binarymax/bashfill/blob/master/zip2bash.j... So you can run './zip2bash.js $somebashfillurl | bash' to light it up.

gourneau 9y ago

Very cool, can we have image import feature too :)

Tenzer 9y ago
Perhaps you can use my command line image printer for something like that: https://github.com/Tenzer/explosion https://github.com/Tenzer/explosion.
hk__2 9y ago
You might be interested by img2txt (https://github.com/hit9/img2txt https://github.com/hit9/img2txt) or libcaca (http://caca.zoy.org/wiki/libcaca http://caca.zoy.org/wiki/libcaca). There are a lot of resources in this old HN thread too: https://news.ycombinator.com/item?id=7776112 https://news.ycombinator.com/item?id=7776112

owendaniel 9y ago

pretty cool, can you make the blocks smaller though improve detail?

hk__2 9y ago
You can’t. It uses characters for pixels so you have either scale up your terminal or use a graphical image display.
- irth 9y ago
  You can use braille unicode characters for sub-character dots as in https://github.com/rastapasta/mapscii https://github.com/rastapasta/mapscii
  - hk__2 9y ago
    Yes but you can’t use different colors for different dots in the same character.
__jal 9y ago
That would be interesting, but first you'd have to write a new terminal type. And then there would be... another step or two.
binarymax 9y ago
If you know that you'll be zoomed way out, and have a big screen, you can fork it and change the dimensions. Terms are 80x23. I made it 40x23 to get squareish blocks. Feel free to go crazy with the dimensions and try it out.

SEJeff 9y ago

For some pretty art on your terminal (this command isn't going to delete anything): yes "$(seq 231 -1 16)" | while read i; do printf "\x1b[48;5;${i}mHi $USER\n"; sleep .02; done Warning: pretty psychedelic colors ^^

akgerber 9y ago
One can always open run this in bash running in a Docker image like so: docker run -it ubuntu /bin/bash
- SEJeff 9y ago
  True, but remember the wise words of Dan Walsh "Containers Don't Contain" in that if you run as root inside of a container without careful consideration, bad users can absolutely break out, just like in a chroot. http://www.projectatomic.io/blog/2016/01/how-to-run-a-more-secure-non-root-user-container/ http://www.projectatomic.io/blog/2016/01/how-to-run-a-more-s... http://www.projectatomic.io/blog/2014/09/yet-another-reason-containers-don-t-contain-kernel-keyrings/ http://www.projectatomic.io/blog/2014/09/yet-another-reason-... In newer docker, the defaults are really good, but even then, it is worth reading up.
  - akgerber 9y ago
    Interesting. Thank you.

pixelbeat__ 9y ago

If you want to generate html, say for converting to an email you can use http://www.pixelbeat.org/scripts/ansi2html.sh http://www.pixelbeat.org/scripts/ansi2html.sh For example: your_script | ansi2html.sh --bg=dark > blah.html or your_script | ansi2html.sh | mail -a "Content-Type: text/html" Your@email.com

binarymax 9y ago

Howdy all. I posted this on lobste.rs and it kinda took off. Glad to see it here again after all these years. Ask me anything. And feature/pull requests can be made here: https://github.com/binarymax/bashfill https://github.com/binarymax/bashfill Happy bashfilling!

Lorin 9y ago

Here's a piece I threw together - Stormy beach, use as you may. https://max.io/bash.html?zip=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 https://max.io/bash.html?zip=eDE1eTF4MjRlMXgzeTF4MzB5MXg1ZTF...