Re:Tell HN: Consider listing your contact details
by mastazi on Friday July 30, 2021 @07:05PM
(#28013508)
While I agree with you about executing snippets of unknown origin not being a good idea, I expect that the average HN user would at most need to copy the part in quotes, and they would be already familiar with the rest of that line.
[ Parent
| on HN ]
Re:Tell HN: Consider listing your contact details
by MauranKilom on Friday July 30, 2021 @07:10PM
(#28013545)
> copy the part in quotes
...which would still get you pwned for the snippet in the question I linked.
Again, I know that for someone reasonably familiar with base64 and bash it's obvious that the base64 example is indeed safe. Maybe you want to filter out people that don't have that level of familiarity (or aren't naive enough to execute bash code they don't fully understand). That's both very arbitrary and unnecessary though - HN is quite diverse. But of course, it's also up to everyone what they do or don't put in their profile.
Re:Tell HN: Consider listing your contact details
by mastazi on Friday July 30, 2021 @07:23PM
(#28013628)
I stand corrected, thanks for the link, from that one I followed this link which is even more interesting as it explains the process of creating that snippet: https://www.vidarholen.net/contents/blog/?p=766