Programmer Humor

33412 readers

963 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

Keep content in english
No advertisements
Posts must be related to programming or programmer topics
- If the mod doesn't find it funny, you're banned. Ha-ha!... For real: do not use the community for "statements". There are other places for such content. Keep it chill and funny.

founded 3 years ago

MODERATORS

Feyter@programming.dev

anzo@programming.dev

BurningTurtle@programming.dev

pylapp@programming.dev

480

finally something worse then curl | sh (lemmy.blahaj.zone)

submitted 1 month ago by not_IO@lemmy.blahaj.zone to c/programmer_humor@programming.dev

123 comments fedilink hide all child comments

https://labyrinth.zone/objects/96478395-64d9-452c-a906-9e6159cd10a3

you are viewing a single comment's thread
view the rest of the comments

[–] Dumhuvud@programming.dev 1 points 1 month ago

Also piping to cat seems redundant but malicious hosts can detect whether the request is getting redirected, using some clever trick, so it’s not.

Just so you know, servers cannot detect piping to any arbitrary process. The trick you're talking about is detecting piping to an interpreter, for the lack of a better term. Piping sleep N to bash is observable behaviour, for example. Piping anything to cat is not.

https://web.archive.org/web/20250622061208/https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/