• 0 Posts
  • 2 Comments
Joined 2 years ago
cake
Cake day: August 24th, 2024

help-circle
  • I said this to someone once and they accused me of being “elitist”. The simple fact is when I learned how to do this stuff, there was no such thing as a GUI for any of it. You did it on the CLI, or not at all.

    (Almost the exact same experience with git, funnily enough)

    I 100% agree though; the bones of the setup of my NAS (admittedly mine is Ubuntu, just because everything else I run is too) was done once 18 months ago, and most has never been touched again. Just software updates every now and then and ignore it the rest of the time.

    I don’t feel like I’ve lost any functionality doing things this way, either. I discovered when a disk died that it even uses SES to light the error LED and turn on the annoying beeping noise on the JBOD, and I didn’t have to do anything to set that up. I call that a win.


  • Not that I know of, which means I can only assume it’ll be a timing-based attack.

    With strategic use of sleep statements in the script you should stand a pretty good chance of detecting the HTTP download blocking while the script execution is paused.

    If you were already shipping the kind of script that unpacks a binary payload from the tail end of the file and executes it, it’s well within the realm of possibility to swap it for a different one.