News for hackers. Stuff that matters.

A comment on GitHub Notification Emails Hijacked to Send Malware. Parent comment

Re:GitHub Notification Emails Hijacked to Send Malware by kurisufag on Thursday September 19, 2024 @07:58PM (#41597533)
people make a lot of noise about piping into shell, but even if the instructions were

wget random.club/rc-12-release.sh

chmod +x ./rc-12-release.sh

./rc-12-release.sh

almost nobody would actually read the script before running it

[ Parent | on HN ]
Re:GitHub Notification Emails Hijacked to Send Malware by dullcrisp on Thursday September 19, 2024 @08:23PM (#41597661)
Well yeah, if your intention is to install software from random.club on your system, what would be the point of checking the installer script? The worst thing it can do is the same thing you want it to do.
[ Parent | on HN ]
Re:GitHub Notification Emails Hijacked to Send Malware by umanwizard on Thursday September 19, 2024 @08:51PM (#41597784)
Yes, which is why complaining about curl | sh is silly.
[ Parent | on HN ]
Re:GitHub Notification Emails Hijacked to Send Malware by dullcrisp on Thursday September 19, 2024 @08:57PM (#41597816)
I’m not disagreeing.
[ Parent | on HN ]