Hacker News Reader

Nice exploit.

I think it can be prevented by `tee`ing bash :

$ curl -s https://localhost:5555/setup.bash | tee bash sleep 3 echo "Hello there :)"

I think you'll still hit the buffer of tee in that case, which may still cause the problem. I'd recommend just saving the file and executing it afterwards.

Reply on news.ycombinator.com