Valentine greeting with bash script (terminal)

http://afshinm.github.com/valentine_script/

by afshinmeh • 13 years ago

17 11 13 years ago

afshinm.github.com

lamby2• 13 years ago

> bash <(curl http...

Stopped right there.

willvarfar• 13 years ago

asking you to download straight to bash? Crazy!!!

That the 'exploit' is hosted on github, though, makes it interesting:

You can't tell ahead of time what you'll be served, but you can tell what exploit you got served...

afshinmeh2• 13 years ago

Yeah I know what you say but that's why I made a github for that script. BTW, I think downloading bash script and run that is a little bit difficult!

olgeni• 13 years ago

It is always a good time to remember that bash might not always live in /bin/, but +1 for a bash script clearly marked as "bash".

lamby2• 13 years ago

Yes, even though it's trivial to make it POSIX-compatible:

https://github.com/afshinm/valentine_script/pull/1

afshinmeh2• 13 years ago

Merged.

phaemon• 13 years ago

That script has:

rm -rf ~

on line 22.

EDIT: Line was added by https://github.com/williame

lewispollard• 13 years ago

I can't believe the guy merged that pull request. What was he thinking?

krthkv• 13 years ago

he came back with another pull request to revert the change .. which the closed without merging .. https://github.com/afshinm/valentine_script/pull/3

bensummers• 13 years ago

I now have something new to link to whenever someone posts something suggesting that a "pipe curl to shell" command isn't insane!

http://williamedwardscoder.tumblr.com/post/42921614369/omg-r...

kvprashant• 13 years ago

williame gave a good lesson! Seriously, you just download a script randomly and execute it without first checking it. And I'd probably understand if it was a heroku script or something but a valentine script seriously?!