this post was submitted on 23 Feb 2026

175 points (97.8% liked)

Selfhosted

62187 readers

741 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

175

A sneaky demonstration of the dangers of curl bash (blog.k3can.us)

submitted 6 months ago* (last edited 6 months ago) by K3can@lemmy.radio to c/selfhosted@lemmy.world

80 comments fedilink hide all child comments

I set up a quick demonstration to show risks of curl|bash and how a bad-actor could potentially hide a malicious script that appears safe.

It's nothing new or groundbreaking, but I figure it never hurts to have another reminder.

(page 2) 30 comments

sorted by: hot top controversial new old

[–] oeLLph@feddit.org 1 points 6 months ago (1 children)

@K3can@lemmy.radio love the early 2000s stylesheet/color theme of your blog 🙂

[–] K3can@lemmy.radio 1 points 6 months ago (1 children)

Thanks! I like to keep things simple. The colors are based on Counter Strike 1.6. 😁

And if you're into the classic styling, my homepage is a direct homage to my old 2000s sites.

[–] Mister_Hangman@lemmy.world 1 points 6 months ago

Hahahaha noticed this too. 1.5 was where it was at tho

[–] neidu3@sh.itjust.works 1 points 6 months ago* (last edited 6 months ago)

Running arbitrary text from the internet through an interpreter.. what could possibly go wrong.

I need to set up a website with

fork while 1

...Just so I can (try to) convince people to

curl | perl

...rhyme intended.

[–] Decronym@lemmy.decronym.xyz 0 points 6 months ago* (last edited 6 months ago) (1 children)

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters	More Letters
DNS	Domain Name Service/System
HTTP	Hypertext Transfer Protocol, the Web
PiHole	Network-wide ad-blocker (DNS sinkhole)
SSL	Secure Sockets Layer, for transparent encryption
TLS	Transport Layer Security, supersedes SSL
VPS	Virtual Private Server (opposed to shared hosting)

5 acronyms in this thread; the most compressed thread commented on today has 12 acronyms.

[Thread #111 for this comm, first seen 23rd Feb 2026, 04:40] [FAQ] [Full list] [Contact] [Source code]

[–] quick_snail@feddit.nl 1 points 6 months ago

Good bot

[–] aeiou_ckr@lemmy.world -1 points 6 months ago (5 children)

This helped a lot. I had no clue I could post the curl string in the URL bar of a browser to view the script. Thanks for the education!

[–] Nibodhika@lemmy.world 1 points 6 months ago

You didn't knew that the tool to handle URLs written in C (very creatively named C-Url) was handling URLs? It's also written in C if you didn't knew.

[–] floquant@lemmy.dbzer0.com 1 points 6 months ago

Shit are URLs esoteric knowledge now?

load more comments (3 replies)

load more comments