this post was submitted on 23 Feb 2026
175 points (97.8% liked)

Selfhosted

62187 readers
786 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

I set up a quick demonstration to show risks of curl|bash and how a bad-actor could potentially hide a malicious script that appears safe.

It's nothing new or groundbreaking, but I figure it never hurts to have another reminder.

you are viewing a single comment's thread
view the rest of the comments
[–] aeiou_ckr@lemmy.world -1 points 6 months ago (3 children)

This helped a lot. I had no clue I could post the curl string in the URL bar of a browser to view the script. Thanks for the education!

[–] smeenz@lemmy.nz 3 points 6 months ago (1 children)

You had no idea you could paste a url into a browser's location bar ?

[–] aeiou_ckr@lemmy.world 0 points 6 months ago (1 children)

I wasn't looking to get roasted for not knowing something. Guess that teaches me something else. Fuck people and thanking them for Shar something I didn't know. 

[–] smeenz@lemmy.nz 1 points 6 months ago

I think the general response is from confusion over what you could possibly have been using the url bar for in your browser if you didn't know you could put urls there.

[–] Nibodhika@lemmy.world 1 points 6 months ago

You didn't knew that the tool to handle URLs written in C (very creatively named C-Url) was handling URLs? It's also written in C if you didn't knew.

[–] floquant@lemmy.dbzer0.com 1 points 6 months ago

Shit are URLs esoteric knowledge now?