News for hackers. Stuff that matters.
Re:Valentine greeting with bash script (terminal) by bensummers on Wednesday February 13, 2013 @09:53AM (#5213298)
I now have something new to link to whenever someone posts something suggesting that a "pipe curl to shell" command isn't insane!

http://williamedwardscoder.tumblr.com/post/42921614369/omg-r...

[ Parent | on HN ]
Re:Valentine greeting with bash script (terminal) by phaemon on Tuesday February 12, 2013 @07:51AM (#5206448)
That script has:

rm -rf ~

on line 22.

EDIT: Line was added by https://github.com/williame

[ Parent | on HN ]
Re:Valentine greeting with bash script (terminal) by lewispollard on Tuesday February 12, 2013 @09:48AM (#5207102)
I can't believe the guy merged that pull request. What was he thinking?
[ Parent | on HN ]
Re:Valentine greeting with bash script (terminal) by krthkv on Wednesday February 13, 2013 @08:37AM (#5212975)
he came back with another pull request to revert the change .. which the closed without merging .. https://github.com/afshinm/valentine_script/pull/3
[ Parent | on HN ]
Re:Valentine greeting with bash script (terminal) by lamby on Tuesday February 12, 2013 @06:48AM (#5206224)
> bash <(curl http...

Stopped right there.

[ Parent | on HN ]
[deleted]
Re:Valentine greeting with bash script (terminal) by mapleoin on Tuesday February 12, 2013 @06:53AM (#5206235)
The point was that it's a really bad idea to encourage people to run random scripts downloaded from the internet.
[ Parent | on HN ]
Re:Valentine greeting with bash script (terminal) by afshinmeh on Tuesday February 12, 2013 @07:04AM (#5206274)
Sorry, deleted.
[ Parent | on HN ]
Re:Valentine greeting with bash script (terminal) by willvarfar on Tuesday February 12, 2013 @06:54AM (#5206238)
asking you to download straight to bash? Crazy!!!

That the 'exploit' is hosted on github, though, makes it interesting:

You can't tell ahead of time what you'll be served, but you can tell what exploit you got served...

[ Parent | on HN ]
Re:Valentine greeting with bash script (terminal) by afshinmeh on Tuesday February 12, 2013 @06:58AM (#5206252)
Yeah I know what you say but that's why I made a github for that script. BTW, I think downloading bash script and run that is a little bit difficult!
[ Parent | on HN ]
Re:Valentine greeting with bash script (terminal) by kvprashant on Wednesday February 13, 2013 @12:12PM (#5214246)
williame gave a good lesson! Seriously, you just download a script randomly and execute it without first checking it. And I'd probably understand if it was a heroku script or something but a valentine script seriously?!
[ Parent | on HN ]
Re:Valentine greeting with bash script (terminal) by olgeni on Tuesday February 12, 2013 @07:03AM (#5206272)
It is always a good time to remember that bash might not always live in /bin/, but +1 for a bash script clearly marked as "bash".
[ Parent | on HN ]
Re:Valentine greeting with bash script (terminal) by lamby on Tuesday February 12, 2013 @07:04AM (#5206275)
Yes, even though it's trivial to make it POSIX-compatible:

https://github.com/afshinm/valentine_script/pull/1

[ Parent | on HN ]
Re:Valentine greeting with bash script (terminal) by afshinmeh on Tuesday February 12, 2013 @07:06AM (#5206282)
Merged.
[ Parent | on HN ]