Re:Detecting the use of “curl | bash” server side
by Analemma_ on Tuesday December 27, 2022 @12:51PM
(#34151388)
I've heard this theory before-- that a command could get cut off halfway and execute something really bad-- and tbh I'm skeptical that this has happened even one time in all the billions of invocations of curl|bash. It's just not worth worrying about, in the same way that a cosmic ray bitflip could cause a kernel bug that erases my entire drive but in reality I don't spend any time worrying about this.
[ Parent
| on HN ]
Re:Detecting the use of “curl | bash” server side
by Arnavion on Tuesday December 27, 2022 @01:35PM
(#34151978)
>It's just not worth worrying about
For you, apparently. Other people do worry about it, which is why they do take care to wrap their script in functions. And my point is there's an even easier and more foolproof way than that.
>in the same way that a cosmic ray bitflip could cause a kernel bug that erases my entire drive but in reality I don't spend any time worrying about this.
Other people use ECC memory because they worry about this, and because it does measurably happen.