

No, it is different, as it adds an entire layer of indirection and unknown to the mix, increasing the risk in the process.
Bla bla punk bla bla vegan bla bla FOSS nerd bla bla ska, ethics and movement enthusiast


No, it is different, as it adds an entire layer of indirection and unknown to the mix, increasing the risk in the process.


Yes, this is the correct approach from a security perspective.


Please tell me you are not seriously equating a highly sophisticated attack line the Solarwind compromise with piping curl to bash?


This is a bit like saying crossing the street blindfolded while juggling chainsaws and crossing the street on a pedestrian crossing while the light is red for cars both carry risk. Sure. One’s a terrible idea though.


Oh the example in the article is the nice version if this attack.
Checking the script as downloaded by wget or curl and then piping curl to bash is still a terrible idea, as you have no guarantee you’ll get the same script in both cases:


Most people don’t know how to use ftp anymore. It’s a pretty limited protocol (and requires 2 open ports to function). It’s hard to integrate with good modern auth solutions. Probably more, that’s off the top of my head.
Fair point. However, if you were more aware and perhaps critical of the carnist culture we are brought up in, you might see more for what they are the knee-jerk reactions to any pointing out the fact that, maybe, possibly, we shouldn’t treat other sentient, living beings capable of feelings and suffering like they were disposable objects?
It’s always a bit amusing to see people immediately go hard the other way when you point out the very obvious and factual: “uh, guys, this is corpse”.
What a great pic, really encapsulates a lot of the image of Garbage and Shirley Manson!
Yup. Compounded by how much otherwise sentient and supposedly caring people insist there is no problem. It’s all very normal.
You can basically tell how spot on an anti-speciesist comment is by looking at the angry downvotes. Thanks folks!
Quite bizarre, indeed. What’s next, caring about others in general? Where does it end!
Are you aware that this is broadly what wanton cruelty – and lack of empathy about it – sounds to people who see it for what it is?
Such a bizarre worldview, to find unnecessary death and suffering normal and even desirable.
Because it is, you know, pieces of corpse? Does that not strike you as an odd thing to inspect? Do you regularly find yourself inspecting corpses despite not being a medical examiner?
His “happy place” is a display of corpse parts?


If your country survives this, you are due a serious overhaul of your supposed checks and balances and, more generally, of your political system. Too much assumes common decency, which the rest of your political and economix systems have been working hard to eliminate.
Electoral college? Hyper powerful president? That stuff needs to go.
It is, see https://github.com/m4tx/curl-bash-attack