4 ms·

curl should probably scream when it detects piping unencrypted wan (not local ips) connections to shell, sort of like what openssh does when a host’s fingerprin

• mr_mitm 2y ago
  How could curl detect where it's piped to?
  • take-five 2y ago
    Something like (in Python) os.isatty(sys.stdout.fileno())
    • Zambyte 2y ago
      That doesn't say where it's piped though. It could be redirected to a file, or piped to something harmless like jq.
  • timando 2y ago
    Iterate through /proc/<pid>/fd and check for the pipe id in the symlink target.
• adamomada 2y ago
  The shell would have to give the warning