mDyJzDPmBdG
Joined 4 months ago
Karma
64
Submissions
42
Member since
Jun 10
Joined 4 months ago
[1] Let's just forget for a second they are famous for low quality software full of security bugs
curl -s script.random-guy.net | sh
It is such glaring security hole that there was an old submission about filling such install script with `sleep` commands and detecting it on server side, to send different versions for downloading (and reviewing) and for actual direct execution.I think the issue is that for now people are actually amused, not shocked. At least that was the reaction to news about agent accessing root files by abusing docker group membership. The general sentiment is still "cool trick bro" not "some agent is going to do something we all are going to regret, and it is going to happen soon"