Post #2426764
2025-07-17 12:24 UTC
@agowa338@chaos.social @filippo@abyssdomain.expert yea, that's why
curl > file
less file
bash file
Is the only way to do such a thing securely.
Or something with signatures on top of it.
Replies (1)
-
@agowa338@chaos.social 2025-07-17 12:28
@fooker@corteximplant.com @filippo@abyssdomain.expert Even that isn't really secure, I've seen tricks with encoding that caused what you see on screen and what gets executed to be dramatically different in the past as well. Like one of the more basic examples was to add a stray "\r" in the middle of a line as that would cause it to overwrite everything that was before that on screen. But when executed it would just skip over cause it was seen as part of a string.