I set up a quick demonstration to show risks of curl|bash and how a bad-actor could potentially hide a malicious script that appears safe.

It’s nothing new or groundbreaking, but I figure it never hurts to have another reminder.

  • aeiou_ckr@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    3 hours ago

    This helped a lot. I had no clue I could post the curl string in the URL bar of a browser to view the script. Thanks for the education!

    • smeenz@lemmy.nz
      link
      fedilink
      English
      arrow-up
      2
      ·
      56 minutes ago

      You had no idea you could paste a url into a browser’s location bar ?

    • Nibodhika@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 hour ago

      You didn’t knew that the tool to handle URLs written in C (very creatively named C-Url) was handling URLs? It’s also written in C if you didn’t knew.