Post B93jhzcbzoMgRjLrSS by geert@society.oftrolls.com
(DIR) More posts by geert@society.oftrolls.com
(DIR) Post #B91d5AHlQVc0BUmZlI by Rairii@labyrinth.zone
8 likes, 17 repeats
i didn’t think it was physically possible, but there’s finally something worse than curl | sh
(DIR) Post #B91fSNGbWomv0vR1bE by moses_izumi@fe.disroot.org
1 likes, 0 repeats
@Rairii yeah, but where's the part where it nags you into installing Yahoo Toolbar?
(DIR) Post #B91fXIARum5ee9tuqm by harlow@plasmatrap.com
1 likes, 0 repeats
@Rairii@labyrinth.zone i mean, at least it isn't curl | tcshi have a vendetta towards tcsh
(DIR) Post #B91kmeRFtRNnpkuAca by Rairii@labyrinth.zone
0 likes, 0 repeats
@c0dec0dec0de @ciaranmak i agree with you, i reverse stuff to learn first and foremost, and would never even think about attaching an llm "agent" to my reversing workflow
(DIR) Post #B91lCFYD32ugAtMdI8 by GoteerTxuria@derg.social
1 likes, 0 repeats
@Rairii@labyrinth.zone Random chance of installation. If you're lucky it might install something else along with it, mistaking it for a dependency.Also, recommended??!?
(DIR) Post #B91op8vLv570mKQUdc by chebra@mstdn.io
1 likes, 0 repeats
@docteurslump @Rairii Recommended by the utterly deranged.
(DIR) Post #B91pEQ6XBG8lImi37Y by Rairii@labyrinth.zone
0 likes, 0 repeats
@Li someone did a poc once showing how curl piping into a shell could be detected serverside compared to directly downloading a script, not sure if that's still true though
(DIR) Post #B91q29hKSCRAtgdT04 by Rairii@labyrinth.zone
0 likes, 0 repeats
@Li @mewsleah basically a server can detect whether you're piping it to sh or not and serve something different if you are
(DIR) Post #B91qhRhARdPoaWFUAK by Rairii@labyrinth.zone
0 likes, 0 repeats
@svuorela yeah someone else mentioned it
(DIR) Post #B91sG3iLhHVuIms0cy by Rairii@labyrinth.zone
0 likes, 0 repeats
@patterfloof @Li it was specifically the piping being detected, found the post again and its over 10 years old https://web.archive.org/web/20160419194042/https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/
(DIR) Post #B91sbwjgK7sx1svjbU by art_codesmith@toot.cafe
1 likes, 0 repeats
@c0dec0dec0de @ciaranmak @Rairii *And* who might hide razor blades in it, for fun.
(DIR) Post #B91svuZY4pNU6xi7ge by art_codesmith@toot.cafe
1 likes, 0 repeats
@Li @Rairii I guess it's fair, in a way.You could download a malicious script.You could hide a malicious script in a .deb/.rpm package.I think it's a notion of sloppiness, almost (not wholly related to AI slop). Like, if you make a package, it looks respectable. If you just give a binary, whatever. If you give a source archive with instructions to build, it's annoying, but at least you can customize it. But if you just say "oh just download a script, it'll install it", it's sloppy.
(DIR) Post #B91vQZuL9ocouGBcsi by maker_tom@famichiki.jp
1 likes, 0 repeats
@RairiiWhat the fuck?!
(DIR) Post #B91w6A1vlAV0oLZ5d2 by lumi@snug.moe
1 likes, 0 repeats
@Rairii install.md/
(DIR) Post #B91wx4r3jSJe6kiEhU by Rairii@labyrinth.zone
0 likes, 0 repeats
@Fiona if that's satire then the license of that project surely has to be too
(DIR) Post #B91zNcWvLoJDzH4xCS by jackemled@furry.engineer
1 likes, 0 repeats
@ozzelot @Rairii Maybe IT workers & software developers will be able to charge more for their services when this is over.
(DIR) Post #B923ksSUh7j7rkLtDc by gorplop@pleroma.m68k.church
1 likes, 0 repeats
@Rairii curl | ollama run $MODEL
(DIR) Post #B92EWvF8dyULwZeZIe by IngaLovinde@embracing.space
1 likes, 0 repeats
@androcat @art_codesmith @c0dec0dec0de @ciaranmak @Rairii also half the time you'll get a pile of steaming shit instead of lego
(DIR) Post #B92PBNH4qIcm0RUJKS by tmcfarlane@toot.community
1 likes, 0 repeats
@Rairii What happens if the AI you use reads those install instructions and uses another AI? You want paperclips? Becuase *THATS* how you get PAPERCLIPS!
(DIR) Post #B92PHMTeie7zGtE5wW by ysegrim@furry.engineer
1 likes, 0 repeats
@chuang @Rairii tbh, I'm getting more members of my team to write clear documentation (and budget from my management for this) by telling them it's so Claude can help them x.x
(DIR) Post #B92PORwYnJ5wFf7sRc by aud@fire.asta.lgbt
1 likes, 0 repeats
@Rairii@labyrinth.zone big "our website is better in the app!" energy. Yeah, and whose fault is that, huh?? huh???
(DIR) Post #B92just69MyeARFZMe by RyeNCode@mstdn.ca
1 likes, 0 repeats
@IngaLovinde @androcat @art_codesmith @c0dec0dec0de @ciaranmak @Rairii "For entertainment purposes only" to cover someone's ass.
(DIR) Post #B92lpKqBVaK526MwQS by corpsedoll@pl.kotobank.ch
1 likes, 0 repeats
@Rairii Pythons non deterministic build systems finally have competition
(DIR) Post #B92mZyGjFQKydc1Sfg by DrKnow@techhub.social
1 likes, 0 repeats
@Rairii 🤦
(DIR) Post #B92n7tEIUQxSr43iLo by carpetbomberz@mastodon.online
1 likes, 0 repeats
@Rairii Foot, meet gun.Gun, meet foot.
(DIR) Post #B92nFPb6Xs5hGkJVb6 by stuartyeates@cloudisland.nz
1 likes, 0 repeats
@Rairii curl -k | shwas right there...
(DIR) Post #B92ouIdTQxHBVLTyPw by patcharcana@furry.engineer
1 likes, 0 repeats
@Rairii I used to joke about how it'd be nice when the pants fell off this tech to be a real engineer who can more or less write your own job specs but there's not enough cash in the entire economy to make me want to clean up after this.
(DIR) Post #B93jhzcbzoMgRjLrSS by geert@society.oftrolls.com
1 likes, 0 repeats
@Rairii Sure, I'll do that next, after handing out my house keys to a psychopath.
(DIR) Post #B9KTfLNXYckGC5Yf6e by MazharHussain@techhub.social
1 likes, 0 repeats
@lumi @Rairii fuck