A random guy telling the world how to install some new software.

[bagder@mastodon.social]

A random guy telling the world how to install some new software. An illustration.

[peturdainn@mastodon.social]

@bagder

[fennix@infosec.space]

@bagder

I really like curl and have used it extensively over the years in various projects.

This installation method has been a cancer on tech for like 15 years now.

[hannah@moonserver.yorha.nexus]

@bagder@mastodon.social Please let this be a bad joke.

Please! ​​

[sjmulder@bsd.network]

@bagder we should take that to the next level with a sh: protocol handler + QR codes!

https://codeberg.org/sjmulder/sh-handler

[bagder@mastodon.social]

The video: https://youtu.be/kRmZ5zmMS2o

[lerxst@az.social]

@bagder at least it’s not ‘sudo bash’?

Not that that makes me feel much better.

[lumi@snug.moe]

@bagder at least it's not being piped to some llm, i guess

install.md is horrifying

(not that i think the software itself is good or should be used. all genai shit is bad and should be shunned)

[climbertobby@chaos.social]

@hannah @bagder

It's software to run code you never saw on your machine, migth as well start during installation

[matt@istheguy.com]

@bagder I always think of the pipegreppers union art when I see this in install docs

Pipegreppers Union

Pipegreppers Union

(pipegrep.sh)

(edited to add a white background, this was unreadable before haha)

[fds@mastodon.social]

@bagder It still feels weird we decided it was okay to just run a bash script off the web without looking at it.

At least if the URL gets compromised it can only affect your own files.

[nickgully@mefi.social]

@bagder 100 billion dollar black jacket right there. You should ask for one.

[maccy@knuddelweide.de]

@bagder@mastodon.social ​​

[nickgully@mefi.social]

@bagder
Netflix and Chill?
No.
Meet Curl and Bash

[irelephant@app.wafrn.net]

@fds@mastodon.social @bagder@mastodon.social

I think the likelihood of nvidia.com getting compromised is low, but yeah this isn't great

[irelephant@app.wafrn.net]

@bagder@mastodon.social

Vibe installing

[schelmo@mastodon.social]

@bagder i want an install.sh for curl which is downloadable with curl.

[karl@infosec.exchange]

@bagder people running this kind of software are exactly the kind of people who would run a curl-pipe-bash, so it checks out.

[elfin@mstdn.social]

@bagder Being a UNIX (these days, linux because that's the flow) guy ... NVIDIA driver blobs can kiss my skinny white butt. Was over it 20 years ago.

WHy do you hurt yourselves. I have emergency numbers for people that like to cut themselves and I don't actually see a divergence. This scares me. I've been upside down at Mach1+ and jumped out of perfectly good helos