News for hackers. Stuff that matters.

A comment on Detecting the use of “curl | bash” server side. Parent comment

Re:Detecting the use of “curl | bash” server side by rascul on Tuesday December 27, 2022 @08:43AM (#34148515)
How would it become truncated?
[ Parent | on HN ]
Re:Detecting the use of “curl | bash” server side by bqmjjx0kac on Tuesday December 27, 2022 @09:18AM (#34148825)
A cat unplugs the router?
[ Parent | on HN ]
Re:Detecting the use of “curl | bash” server side by layer8 on Tuesday December 27, 2022 @09:59AM (#34149221)
When a dog does it, would it be trundoged instead?
[ Parent | on HN ]
Re:Detecting the use of “curl | bash” server side by fathyb on Tuesday December 27, 2022 @09:49AM (#34149123)
In the case of curl it can happen if the server did not use Content-Length and the connection gets closed.
[ Parent | on HN ]
Re:Detecting the use of “curl | bash” server side by Arnavion on Tuesday December 27, 2022 @01:37PM (#34152004)
All the presence of the content-length header would do is change curl's exit code when the connection breaks. The part where curl output the truncated script and bash executed it would be unchanged.
[ Parent | on HN ]
Re:Detecting the use of “curl | bash” server side by Arnavion on Tuesday December 27, 2022 @01:33PM (#34151952)
The whole context of this conversation is >If the connection fails for any reason, the script will stop, potentially breaking or corrupting things.
[ Parent | on HN ]