Top all-time · #10971
Darian Moody
Personal blog · djm.org.uk/postsprogrammingsecurity
Darian Moody's personal blog at djm.org.uk covers programming and security. Since 2011, 7 different Hacker News readers have linked it 7 times, most often “Protect yourself from the hidden dangers of `curl – sh`”. The last post was in 2016, but the archive is still widely read.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Darian Moody's posts on protecting yourself from non-obvious dangers of fetching software and content, such as ISP HTTP injection and servers serving different content by user-agent or IP.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Darian Moody builds software in London.
Most-linked posts?
- Protect yourself from the hidden dangers of `curl – sh`4 people · 4 mentions · first linked 2013-08-20
What Hacker News says?
Please read http://www.djm.org.uk/protect-yourself-from-non-obvious-dang... ( https://news.ycombinator.com/item?id=8385213 ).
Comment linking /protect-yourself-from-non-obvious-dangers-curl-url-pipe-sh/
on “Disable sharing of Spotlight searches with Apple”Submitted Protect yourself from the hidden dangers of `curl – sh` as a story · 52 points
HN discussionIt's not exactly the same, and http injection by ISP's is definitely a thing. https://www.djm.org.uk/posts/protect-yourself-from-non-obvio...
Comment linking /posts/protect-yourself-from-non-obvious-dangers-curl-url-pipe-sh/index.html
on “SpaceVim – Like Spacemacs, but for Vim”Submitted Protect yourself from the non-obvious dangers of installing via `curl | sh` as a story · 2 points
HN discussionThis article completely neglects to mention the other dangers of this pattern, namely what happens when the connection drops mid download[1] or the server responds differently based on user-agent or IP[2]. [1] http://www.seancassidy.me/dont-pipe-to-your-shell.html [2] http://www.djm.org.uk/protect-yourself-from-non-obvious-dang...
Comment linking /protect-yourself-from-non-obvious-dangers-curl-url-pipe-sh/
on “On the curl | sh pattern”Submitted Using Nginx as a reverse caching proxy for Wordpress as a story · 2 points
HN discussionSubmitted Writing Extensible Elixir with Behaviours as a story · 1 points
HN discussion