Re:Show HN: Easily connect to a VPN in a country of your choice
by hrrsn on Thursday January 26, 2017 @04:57PM
(#13495613)
I gotchu' (/s)
curl http://pastie.org/pastes/10992864/download | bash
Re:Show HN: Easily connect to a VPN in a country of your choice
by stevekemp on Friday January 27, 2017 @01:01AM
(#13498068)
This looks like a node version of the previously submitted go tool `autovpn`, which I commented on previously:
https://news.ycombinator.com/item?id=13454960
This code also writes remote-content to a file, and then passes that to openvpn. Scary stuff.
Not disputing that it's the worst but it could be even more worse.
It's missing the key component: a curl | bash install and upgrade script running over HTTP (not HTTPS). In this case it'd be extra hilarious as upgrades would presumably go over your existing VPN connection which could then hijack the script and run arbitrary code on your machine.