News for hackers. Stuff that matters.

A comment on Code highlighting with Cursor AI used for $500k theft. Parent comment

Re:Code highlighting with Cursor AI used for $500k theft by throwawayffffas on Tuesday July 15, 2025 @08:39AM (#44570519)
Not just apt-get it might even have some `curl ... | sh`.
[ Parent | on HN ]
Re:Code highlighting with Cursor AI used for $500k theft by chasd00 on Tuesday July 15, 2025 @08:51AM (#44570609)
Curl | sh is gold. It’s like finding a candy bar on the street and eating it heh.
[ Parent | on HN ]
Re:Code highlighting with Cursor AI used for $500k theft by dns_snek on Tuesday July 15, 2025 @10:01AM (#44571258)
You can say the same about the vast majority of distribution methods we have. There's no difference between `curl | sh` and executing a binary you download from the internet.
[ Parent | on HN ]
Re:Code highlighting with Cursor AI used for $500k theft by bravesoul2 on Tuesday July 15, 2025 @09:45PM (#44577890)
Checksums and signatures make it slightly better. At least you can go from OK to vulnerable by downloading the same thing as an hour ago. But if you upgrade then yeah.
[ Parent | on HN ]