News for hackers. Stuff that matters.

A comment on Curl to shell isn’t so bad (2019). Parent comment

Re:Curl to shell isn’t so bad (2019) by hoophoop on Tuesday January 28, 2020 @10:30AM (#22170251)
That major point is plain wrong.

https://sysdig.com/blog/friends-dont-let-friends-curl-bash/

https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...

These attacks can be mounted on the network side.

Also you can inadvertently execute data from a benign captive portal or a server error page and so on.

[ Parent | on HN ]
Re:Curl to shell isn’t so bad (2019) by jdefr89 on Tuesday January 28, 2020 @10:35AM (#22170297)
I can do similar attacks on ANYTHING in the form of grabbing code and running it on my machine.. If you aren't doing 'curl | bash' recklessly it isn't a problem.
[ Parent | on HN ]