3 ms·
It's possible to detect "curl | bash" server side. See https://news.ycombinator.com/item?id=34145799 https://news.ycombinator.com/item?id=34145799
by 1una 2y ago
It's possible to detect "curl | bash" server side. See https://news.ycombinator.com/item?id=34145799 https://news.ycombinator.com/item?id=34145799
- awwaiid 2y agoDetect AND change what is sent from the server. So you open the link in a browser and see that the remote shell code is fine, does what you want, then you `curl | bash` it and it sends a completely different program to run. If you trust where you are curling from, and you trust everyone they trust and that they definitely haven't been hacked, then great! Blindly eval that code! That's what I do :)
- Dylan16807 2y agoThe threat model where a malicious server can trick curl|bash but not the alternatives is extremely narrow. Reacting to curl|bash is missing the forest for the single tree.