• 0 Posts
  • 31 Comments
Joined 3 years ago
cake
Cake day: August 3rd, 2023

help-circle







  • The real answer is that user-agents can be used to show you one version in your browser and then serve you another one with curl.

    I say “real” because all the idiots talking about “don’t run scripts from the internet!!!” probably forget they don’t decompile every binary they run. E.g. the rustup installer (the tool for managing Rust toolchains) is by default a curl+bash one liner. Why would I worry about them serving me a wrong script when I’m any way about to run their binary blob?

    If you have any doubt about the hosting service (which might or not be the same as the software author!) then avoid piping into bash, but then why would you run their code at all if you distrust them so much? Do you expect github to install a keylogger? Probably not. Some telemetry hook to know whose running the requested script? Possibly someday





  • We’re not talking about propagandists saying “Iranians bad”, we’re talking about people writing the literal English translations themselves and expecting everyone else to guess what they mean.

    I’m very familiar (and you as well) with how dramatic Iranian idioms can sound when translated literally, but how are we to know, in an English speaking space, that they are supposedly Farsi speakers?

    The most likely/simple explanation is that most of these people mean what they write, rather than some rather niche lost-in-translation meaning. And then, when called out on that, they just give the same answer as you do. “It’s just a figure of speech bro”.