3 ms·
Does this break those self-extracting script/tar files? I forget how those are done, I haven't seen one in many years.
by lupusreal 2y ago
Does this break those self-extracting script/tar files? I forget how those are done, I haven't seen one in many years.
- zx2c4 2y agoFrom the article: "It remains possible to put arbitrary bytes AFTER the parts of the shell script that get parsed & executed (like some Solaris patch files do). "
- sneela 2y agoAre you talking about Shar? https://en.wikipedia.org/wiki/Shar_(file_format) https://en.wikipedia.org/wiki/Shar_(file_format)
- ape4 2y agoThat was a neat idea back in the day but should disallowed now. Running downloaded executables considered harmful.
- Joker_vD 2y agoNot in the "Installation: just run `docker run kekw/our-shiny-ai-chatbot` in your shell" world we're living today.
- nucleardog 2y agoI think the better example is the all-too-common: “Installation: Just run `curl -sL http://goo.gl/hsjdiNgtehsn http://goo.gl/hsjdiNgtehsn | sudo bash`”
- osmsucks 2y ago> Running downloaded executables considered harmful Most executables are downloaded. :)
- 73kl4453dz 2y agoThey were generally uuencoded or similar
- jancsika 2y agoIf you don't know anything about OpenBSD, here's a fun thing: 1. Randomly choose "yes" or "no" to this question. 2. Read the post and get the answer. 3. Repeat until you begin to get a tingly "Spidey sense" that overrides your random-choice. My Spidey sense here was, "Yes, because OpenBSD would have already thought about and covered that use-case." And indeed, toward the end of the post, that contingency is covered and documented. Note: if you try this at your job and sense that the company will almost always choose the worst option, you should probably leave that job.