3 ms·

curl -L https://install.pivpn.dev https://install.pivpn.dev | bash fuck fuck fuck no. this whole site should be blacklisted

by intpx 7y ago

jolmg 7y ago
At least it's well commented.
chrisfinazzo 7y ago
Sigh... Not this again. curl into a shell, because YOLO. For the love of $deity, at least pass the -o option or do something like the following before running this - substitute in your editor of choice. `curl -L https://install.pivpn.dev https://install.pivpn.dev | bbedit`
Havoc 7y ago
Not everyone is harbouring top secret data on their ubuntu install. It's a bad idea sure, but worse crimes have been known to happen
- netsharc 7y ago
  What if the script turns your computer to a server serving the type of content you know the FBI will bust down your door for?
AviationAtom 7y ago
Was surprised I had to scroll to the bottom to find this comment
universenz 7y ago
Can you elaborate for a terminal/linux layman?
- g82918 7y ago
  It immediately runs a script from a site in a bash instance. The script could do anything like exploit some zero day like shellshock or other vulnerability. They would prefer the user read the script first. Most people won't read it either way, but if people don't just pipe it to bash other people will feel like it is more secure. If the script is served over http then there are also ways of replacing it by some mechanisms without you knowing as well which can add danger.
- beatgammit 7y ago
  Running untrusted code without even looking at the code first. For all you know, the script asks for root access, and if granted, installs a rootkit, and if not, deletes all the files in your home directory. Random scripts from the internet should always at least be casually reviewed. Posting something like this just encourages people to trust random scripts on the internet, which is going to end poorly eventually.
progval 7y ago
Plus, even if not malicious, this script messes with a bunch of system config: * installed unattended-upgrades (from a random github repo instead of apt repos * passes --yes to apt-get, which may remove important packages * reconfigures /sbin/iptables to link to /usr/sbin/iptables-legacy * saves the current iptables rules (some of which may have been set temporarily by root) * overwrites existing dhcpd config if it already exists * overwrites existing openvpn-related config if it already exists (including syslog)

curl -L https://install.pivpn.dev https://install.pivpn.dev | bash fuck fuck fuck no. this whole site should be blacklisted

by intpx 7y ago

curl -L https://install.pivpn.dev https://install.pivpn.dev | bash fuck fuck fuck no. this whole site should be blacklisted

jolmg 7y ago

At least it's well commented.

chrisfinazzo 7y ago

Sigh... Not this again. curl into a shell, because YOLO. For the love of $deity, at least pass the -o option or do something like the following before running this - substitute in your editor of choice. `curl -L https://install.pivpn.dev https://install.pivpn.dev | bbedit`

Havoc 7y ago

Not everyone is harbouring top secret data on their ubuntu install. It's a bad idea sure, but worse crimes have been known to happen

netsharc 7y ago
What if the script turns your computer to a server serving the type of content you know the FBI will bust down your door for?

AviationAtom 7y ago

Was surprised I had to scroll to the bottom to find this comment

universenz 7y ago

Can you elaborate for a terminal/linux layman?

g82918 7y ago
It immediately runs a script from a site in a bash instance. The script could do anything like exploit some zero day like shellshock or other vulnerability. They would prefer the user read the script first. Most people won't read it either way, but if people don't just pipe it to bash other people will feel like it is more secure. If the script is served over http then there are also ways of replacing it by some mechanisms without you knowing as well which can add danger.
beatgammit 7y ago
Running untrusted code without even looking at the code first. For all you know, the script asks for root access, and if granted, installs a rootkit, and if not, deletes all the files in your home directory. Random scripts from the internet should always at least be casually reviewed. Posting something like this just encourages people to trust random scripts on the internet, which is going to end poorly eventually.

progval 7y ago

Plus, even if not malicious, this script messes with a bunch of system config: * installed unattended-upgrades (from a random github repo instead of apt repos * passes --yes to apt-get, which may remove important packages * reconfigures /sbin/iptables to link to /usr/sbin/iptables-legacy * saves the current iptables rules (some of which may have been set temporarily by root) * overwrites existing dhcpd config if it already exists * overwrites existing openvpn-related config if it already exists (including syslog)