Valentines Day in BASH (opens in new tab)

(valentines.digitalocean.com)

10 pointssrajbr12y ago7 comments

7 comments

Can we please not tell people to pipe things directly from curl to bash?

Exactly. There's no way in hell anyone should ever do that, even (thanks to DNS hijacking etc.) if they thought the file was something they wrote themselves.

srajbrOP12y ago

people might have thought it to be malicious so i simple posted the link

quchen12y ago

Don't we have a bit too much of a history with clicking/doing things on the internet with "love" in their names? Happy Friday by DigitalOcean, where trusting random people on the internets is company policy.

salgernon12y ago

Pipe it to more. That's just crap at the end after a lot of white space. What's sad about this is that it doesnt use curses and just reprints the entire terminal.

curl http://artscene.textfiles.com/vt100/valentin.vt

And related.

ryutin12y ago

no love for my mac :-(

[Fri Feb 14 14:35:37] -bash:~$ curl -s valentines.digitalocean.com | bash

bash: line 1: syntax error near unexpected token `newline'

bash: line 1: `<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">'

salgernon12y ago

Why could't this just be a text file with curses escapes available via netcat? At least then it's limited only to known terminal exploits, rather than running whatever the hell it wants as you.

j / k navigate · click thread line to collapse

7 comments

kylek12y ago

Can we please not tell people to pipe things directly from curl to bash?

notacoward12y ago

Exactly. There's no way in hell anyone should ever do that, even (thanks to DNS hijacking etc.) if they thought the file was something they wrote themselves.

srajbrOP12y ago

people might have thought it to be malicious so i simple posted the link

quchen12y ago

salgernon12y ago

Pipe it to more. That's just crap at the end after a lot of white space. What's sad about this is that it doesnt use curses and just reprints the entire terminal.

curl http://artscene.textfiles.com/vt100/valentin.vt

And related.

ryutin12y ago

no love for my mac :-(

[Fri Feb 14 14:35:37] -bash:~$ curl -s valentines.digitalocean.com | bash

bash: line 1: syntax error near unexpected token `newline'

bash: line 1: `<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">'

salgernon12y ago

Why could't this just be a text file with curses escapes available via netcat? At least then it's limited only to known terminal exploits, rather than running whatever the hell it wants as you.

j / k navigate · click thread line to collapse