home.social

#curlbash — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #curlbash, aggregated by home.social.

fetched live
  1. Curly shells and rabbit holes.

    I treated myself to a new keyboard. One of my requirements for a keyboard is that it is QMK (or any other FOSS firmware) compatible.

    Since I am currently spending most of my private computer time on macOS, I wanted to be able to build the firmware and flash it from there.

    One of the first steps of the QMK setup procedure is to curl | sh a command from the docs to install the QMK command line tool.

    Shell-curling always feels icky to me for various reasons, and so I looked for alternatives.

    Here's my setup (using homebrew, which is also installed by bash-curling ;)

    • Install container: brew install container
    • Install dfu-util: brew install dfu-util
    • Use the docker build script with container: SKIP_FLASHING_SUPPORT=1 RUNTIME=container ./util/docker_build.sh your/keyboard:your_layout
    • Flash using dfu-util: dfu-util -a 0 -w -d 0483:DF11 -s 0x08000000:leave -D /path/to/your/bin

    It works and does not clutter up my system.

    #macOS #container #qmk #curlbash #homebrew

  2. Curly shells and rabbit holes.

    I treated myself to a new keyboard. One of my requirements for a keyboard is that it is QMK (or any other FOSS firmware) compatible.

    Since I am currently spending most of my private computer time on macOS, I wanted to be able to build the firmware and flash it from there.

    One of the first steps of the QMK setup procedure is to curl | sh a command from the docs to install the QMK command line tool.

    Shell-curling always feels icky to me for various reasons, and so I looked for alternatives.

    Here's my setup (using homebrew, which is also installed by bash-curling ;)

    • Install container: brew install container
    • Install dfu-util: brew install dfu-util
    • Use the docker build script with container: SKIP_FLASHING_SUPPORT=1 RUNTIME=container ./util/docker_build.sh your/keyboard:your_layout
    • Flash using dfu-util: dfu-util -a 0 -w -d 0483:DF11 -s 0x08000000:leave -D /path/to/your/bin

    It works and does not clutter up my system.

    #macOS #container #qmk #curlbash #homebrew

  3. Curly shells and rabbit holes.

    I treated myself to a new keyboard. One of my requirements for a keyboard is that it is QMK (or any other FOSS firmware) compatible.

    Since I am currently spending most of my private computer time on macOS, I wanted to be able to build the firmware and flash it from there.

    One of the first steps of the QMK setup procedure is to curl | sh a command from the docs to install the QMK command line tool.

    Shell-curling always feels icky to me for various reasons, and so I looked for alternatives.

    Here's my setup (using homebrew, which is also installed by bash-curling ;)

    • Install container: brew install container
    • Install dfu-util: brew install dfu-util
    • Use the docker build script with container: SKIP_FLASHING_SUPPORT=1 RUNTIME=container ./util/docker_build.sh your/keyboard:your_layout
    • Flash using dfu-util: dfu-util -a 0 -w -d 0483:DF11 -s 0x08000000:leave -D /path/to/your/bin

    It works and does not clutter up my system.

    #macOS #container #qmk #curlbash #homebrew

  4. Curly shells and rabbit holes.

    I treated myself to a new keyboard. One of my requirements for a keyboard is that it is QMK (or any other FOSS firmware) compatible.

    Since I am currently spending most of my private computer time on macOS, I wanted to be able to build the firmware and flash it from there.

    One of the first steps of the QMK setup procedure is to curl | sh a command from the docs to install the QMK command line tool.

    Shell-curling always feels icky to me for various reasons, and so I looked for alternatives.

    Here's my setup (using homebrew, which is also installed by bash-curling ;)

    • Install container: brew install container
    • Install dfu-util: brew install dfu-util
    • Use the docker build script with container: SKIP_FLASHING_SUPPORT=1 RUNTIME=container ./util/docker_build.sh your/keyboard:your_layout
    • Flash using dfu-util: dfu-util -a 0 -w -d 0483:DF11 -s 0x08000000:leave -D /path/to/your/bin

    It works and does not clutter up my system.

    #macOS #container #qmk #curlbash #homebrew

  5. If a security product suggests installing it with "curl | bash", which one is it?

    #security #CurlBash

  6. If a security product suggests installing it with "curl | bash", which one is it?

    #security #CurlBash

  7. If a security product suggests installing it with "curl | bash", which one is it?

    #security #CurlBash

  8. If a security product suggests installing it with "curl | bash", which one is it?

    #security #CurlBash

  9. If a security product suggests installing it with "curl | bash", which one is it?

    #security #CurlBash

  10. @farrokhi

    Here's a good post showing how you can detect curl | bash from the server side and not deliver the malicious payload unless someone's running curl | bash

    lukespademan.com/blog/the-dang

    #infosec #curlbash @infosec

  11. @farrokhi

    Here's a good post showing how you can detect curl | bash from the server side and not deliver the malicious payload unless someone's running curl | bash

    lukespademan.com/blog/the-dang

    #infosec #curlbash @infosec

  12. @farrokhi

    Here's a good post showing how you can detect curl | bash from the server side and not deliver the malicious payload unless someone's running curl | bash

    lukespademan.com/blog/the-dang

    @[email protected]

  13. @farrokhi

    Here's a good post showing how you can detect curl | bash from the server side and not deliver the malicious payload unless someone's running curl | bash

    lukespademan.com/blog/the-dang

    #infosec #curlbash @infosec

  14. @farrokhi

    Here's a good post showing how you can detect curl | bash from the server side and not deliver the malicious payload unless someone's running curl | bash

    lukespademan.com/blog/the-dang

    #infosec #curlbash @infosec

  15. @apicultor note in the blog post we do not pipe curl to bash. We use curl's -o option to download the installer bash script to a local file and then run it to leave behind a paper trail.

    curl -o ronin-install.sh https://raw.githubusercontent.com/ronin-rb/scripts/main/ronin-install.sh && bash ronin-install.sh

    We also provide manual copy/pasteable installation instructions for most all of the major platforms/distros if you do not want to use an installer script:

    #curlbash #ronin #roninrb #readthefinemanual #checkyourselfbeforeyouwreckyourself

  16. @apicultor note in the blog post we do not pipe curl to bash. We use curl's -o option to download the installer bash script to a local file and then run it to leave behind a paper trail.

    curl -o ronin-install.sh https://raw.githubusercontent.com/ronin-rb/scripts/main/ronin-install.sh && bash ronin-install.sh

    We also provide manual copy/pasteable installation instructions for most all of the major platforms/distros if you do not want to use an installer script:

    #curlbash #ronin #roninrb #readthefinemanual #checkyourselfbeforeyouwreckyourself

  17. @apicultor note in the blog post we do not pipe curl to bash. We use curl's -o option to download the installer bash script to a local file and then run it to leave behind a paper trail.

    curl -o ronin-install.sh https://raw.githubusercontent.com/ronin-rb/scripts/main/ronin-install.sh && bash ronin-install.sh

    We also provide manual copy/pasteable installation instructions for most all of the major platforms/distros if you do not want to use an installer script:

    #curlbash #ronin #roninrb #readthefinemanual #checkyourselfbeforeyouwreckyourself

  18. @apicultor note in the blog post we do not pipe curl to bash. We use curl's -o option to download the installer bash script to a local file and then run it to leave behind a paper trail.

    curl -o ronin-install.sh https://raw.githubusercontent.com/ronin-rb/scripts/main/ronin-install.sh && bash ronin-install.sh

    We also provide manual copy/pasteable installation instructions for most all of the major platforms/distros if you do not want to use an installer script:

    #curlbash #ronin #roninrb #readthefinemanual #checkyourselfbeforeyouwreckyourself

  19. @apicultor note in the blog post we do not pipe curl to bash. We use curl's -o option to download the installer bash script to a local file and then run it to leave behind a paper trail.

    curl -o ronin-install.sh https://raw.githubusercontent.com/ronin-rb/scripts/main/ronin-install.sh && bash ronin-install.sh

    We also provide manual copy/pasteable installation instructions for most all of the major platforms/distros if you do not want to use an installer script:

    #curlbash #ronin #roninrb