3 ms·

"curl -sL https://raw.githubusercontent.com/leodeim/vpsmon/main/install.sh https://raw.githubusercontent.com/leodeim/vpsmon/main/instal... | sudo bash" lol nop

by nimbius 1mo ago

"curl -sL https://raw.githubusercontent.com/leodeim/vpsmon/main/install.sh https://raw.githubusercontent.com/leodeim/vpsmon/main/instal... | sudo bash" lol nope. i thought we all grew out of this crap?

deleted 1mo ago
[deleted]
ygagaga 1mo ago
just check the code before running :)
dang 1mo ago
"Please don't post shallow dismissals, especially of other people's work. A good critical comment teaches us something." https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- nimbius 1mo ago
  https://tferdinand.net/en/why-curl-bash-is-a-dangerous-bad-habit/ https://tferdinand.net/en/why-curl-bash-is-a-dangerous-bad-h... https://www.lesinskis.com/dont-pipe-curl-into-bash.html https://www.lesinskis.com/dont-pipe-curl-into-bash.html https://www.cyberhub.blog/article/25147-why-curl-pipe-bash-is-a-dangerous-security-habit https://www.cyberhub.blog/article/25147-why-curl-pipe-bash-i... oh hey lets not forget this one too https://news.ycombinator.com/item?id=47860669 https://news.ycombinator.com/item?id=47860669
  - ErroneousBosh 1mo ago
    That's nice but you can also just look at the linked github repo and inspect install.sh for yourself. It's pretty straightforward. It builds the binary for your monitoring software from the git repo, based on the architecture you're on, and if required sets up a systemd unit to kick it off on boot. It's quite nice.
  - dang 1mo ago
    Yes, I know that people repeat this a lot, but it's a generic dismissal that has nothing to do with the specifics of the project being discussed, which makes it shallow and offtopic. (Especially when taking the form of a snarky attack.) Perhaps the first 1,000 times it was mentioned, there was some juice in the lemon, but it's long gone.
aruggirello 1mo ago
Did we? But my concern is with uninstallation: "curl -sL https://... | sudo bash" Now you won't be able to uninstall it if the repo ever goes black...

by nimbius 1mo ago

deleted 1mo ago

[deleted]

ygagaga 1mo ago

just check the code before running :)

dang 1mo ago

"Please don't post shallow dismissals, especially of other people's work. A good critical comment teaches us something." https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html

nimbius 1mo ago
https://tferdinand.net/en/why-curl-bash-is-a-dangerous-bad-habit/ https://tferdinand.net/en/why-curl-bash-is-a-dangerous-bad-h... https://www.lesinskis.com/dont-pipe-curl-into-bash.html https://www.lesinskis.com/dont-pipe-curl-into-bash.html https://www.cyberhub.blog/article/25147-why-curl-pipe-bash-is-a-dangerous-security-habit https://www.cyberhub.blog/article/25147-why-curl-pipe-bash-i... oh hey lets not forget this one too https://news.ycombinator.com/item?id=47860669 https://news.ycombinator.com/item?id=47860669
- ErroneousBosh 1mo ago
  That's nice but you can also just look at the linked github repo and inspect install.sh for yourself. It's pretty straightforward. It builds the binary for your monitoring software from the git repo, based on the architecture you're on, and if required sets up a systemd unit to kick it off on boot. It's quite nice.
- dang 1mo ago
  Yes, I know that people repeat this a lot, but it's a generic dismissal that has nothing to do with the specifics of the project being discussed, which makes it shallow and offtopic. (Especially when taking the form of a snarky attack.) Perhaps the first 1,000 times it was mentioned, there was some juice in the lemon, but it's long gone.

aruggirello 1mo ago

Did we? But my concern is with uninstallation: "curl -sL https://... | sudo bash" Now you won't be able to uninstall it if the repo ever goes black...