News for hackers. Stuff that matters.

A comment on Detecting the use of “curl – bash” server side. Parent comment

Re:Detecting the use of “curl – bash” server side by pif on Wednesday April 20, 2016 @06:57AM (#11533488)
Yes, but not as root!
[ Parent | on HN ]
Re:Detecting the use of “curl – bash” server side by crdoconnor on Wednesday April 20, 2016 @07:05AM (#11533518)
https://xkcd.com/1200/
[ Parent | on HN ]
Re:Detecting the use of “curl – bash” server side by the8472 on Wednesday April 20, 2016 @08:24AM (#11533827)
we can get better compartmentalization than that with things like user namespaces (firejail[1]) or spawning a temporary user id[2]

[1] https://l3net.wordpress.com/projects/firejail/ [2] https://github.com/teran-mckinney/raru

[ Parent | on HN ]
Re:Detecting the use of “curl – bash” server side by nerdponx on Wednesday April 20, 2016 @07:45AM (#11533653)
But that means they have to steal the laptop in the two minute window before it goes to sleep.

It's not like your user password is 1234, right?

[ Parent | on HN ]
Re:Detecting the use of “curl – bash” server side by Zeeem on Thursday April 21, 2016 @12:19AM (#11539672)
When I got my last computer, I just copied my home directory over. Funnily enough, my old login sessions worked.
[ Parent | on HN ]