K3CANFeb 23

A sneaky demonstration of the dangers of curl bash

https://lemmy.radio/post/12010162

A sneaky demonstration of the dangers of curl bash - Lemmy.Radio

I set up a quick demonstration to show risks of curl|bash and how a bad-actor could potentially hide a malicious script. It’s nothing new or groundbreaking, but I figure it never hurts to have another reminder.

Show threadssfckdtFeb 24

I’m a bit lost with

a more cautious user might first paste the url into the address bar of their web browser to see what the script looks like before running it. In the

You… You just… You just dump the curl output to file and examine that and then run it if its good

Just a weird imagined sequence to me.

Show threadmartini1992Feb 24
Worse than that, the server can change it’s response based on user agent so you need to curl it to a file first, a browser could be served a completely different response.
Show threadK3CAN
Which is exactly what is demonstrated in the post. 🙃
Feb 24 at 10:30amWeb