this post was submitted on 17 Jun 2026
72 points (96.2% liked)

Linux

19987 readers
172 users here now

Welcome to c/linux!

Welcome to our thriving Linux community! Whether you're a seasoned Linux enthusiast or just starting your journey, we're excited to have you here. Explore, learn, and collaborate with like-minded individuals who share a passion for open-source software and the endless possibilities it offers. Together, let's dive into the world of Linux and embrace the power of freedom, customization, and innovation. Enjoy your stay and feel free to join the vibrant discussions that await you!

Rules:

  1. Stay on topic: Posts and discussions should be related to Linux, open source software, and related technologies.

  2. Be respectful: Treat fellow community members with respect and courtesy.

  3. Quality over quantity: Share informative and thought-provoking content.

  4. No spam or self-promotion: Avoid excessive self-promotion or spamming.

  5. No NSFW adult content

  6. Follow general lemmy guidelines.

founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[โ€“] Prove_your_argument@piefed.social 2 points 5 months ago* (last edited 5 months ago) (2 children)

Ah yes, run this random shell script hosted on the internet.

And I got downvoted for suggesting that they use an ML tool like crowdstrike to scan submissions for weird things.... and for some reason people pointed out that they caused one incident of linux crashes and one incident of windows crashes last year. What if I told you that you could run a scan like that on a VM with the storage, web hosting and everything else entirely separate from said scanning VM... but no, random shell scripts into terminal GO!

Just seeing the results of a sandbox detonation should give you some level of an idea that something is bad or not bad. This kind of tooling isn't exclusive to any one entity and the results should be part of any repo for anyone to review and flag if you really want to avoid ML as a layer of defense.

[โ€“] Undaunted@feddit.org 1 points 5 months ago

Reading through the shell script and understanding what it does before you run it should be a given. You don't need to trust any closed source tool or whatever. Read it, before you execute it. If you are unable to do that, Arch is probably not the right distro for you anyway and in that case, good luck.