I wonder what their file storage limits are. Can I send them /dev/random ?
Curl.io – Share files from your terminal or ssh
21–30 of 68 posts
Re: Curl.io – Share files from your terminal or ssh
#22whaaat. does anyone else think this is slightly suspect and/or bogus?
I like how this was downvoted to hell.
Re: Curl.io – Share files from your terminal or ssh
#23Yikes, this should really be accessible only via HTTPS. Copying commands from untrusted websites (or insecure connections) and pasting them into your terminal is not a good idea: http://thejh.net/misc/website-terminal-copy-paste
Don't know about you, but an SSL certificate does nothing to increase my level of trust of a website.
Re: Curl.io – Share files from your terminal or ssh
#24Everything has to be 100% relayed via a central server. Sigh.
Not your fault of course. We've all lost kittens to NAT.
Re: Curl.io – Share files from your terminal or ssh
#25Yikes, this should really be accessible only via HTTPS. Copying commands from untrusted websites (or insecure connections) and pasting them into your terminal is not a good idea: http://thejh.net/misc/website-terminal-copy-paste
Don't know about you, but an SSL certificate does nothing to increase my level of trust of a website.
you're right but it should increase the level of trust along the way, no? or do I not undestand SSL correctly?
Re: Curl.io – Share files from your terminal or ssh
#26Yikes, this should really be accessible only via HTTPS. Copying commands from untrusted websites (or insecure connections) and pasting them into your terminal is not a good idea: http://thejh.net/misc/website-terminal-copy-paste
That's not really relevant to what's going on here. This isn't some script you're blindly downloading/executing from an untrusted source, and it's certainly not a phishing attempt with a seemingly innocuous URL that is actually malicious once you copy it.
You can just `man curl` and find out exactly what's going on here. (http://unixhelp.ed.ac.uk/CGI/man-cgi?curl, scroll down to the bit on "--form", and check out the example) I think curl.io, the service, merely accepts this form data and stores the file on their servers, allowing you access. But you should easily be able to point at your own HTTP server and do all the same stuff. I don't see any "magic" here, other than a little web app that's responsible for taking in the data and writing whatever that data is to a given filename.
Re: Curl.io – Share files from your terminal or ssh
#27Yikes, this should really be accessible only via HTTPS. Copying commands from untrusted websites (or insecure connections) and pasting them into your terminal is not a good idea: http://thejh.net/misc/website-terminal-copy-paste
That's not really relevant to what's going on here. This isn't some script you're blindly downloading/executing from an untrusted source, and it's certainly not a phishing attempt with a seemingly innocuous URL that is actually malicious once you copy it. You can just `man curl` and find out exactly what's going on here. ( http://unixhelp.ed.ac.uk/CGI/man-cgi?curl , scroll down to the bit on "--form", and check out t…
I think the poster above you meant that someone could change the command to a malicious one if they found a security hole.
Re: Curl.io – Share files from your terminal or ssh
#28Make it support PUT instead of POST with a file form field and the command becomes simplified to:
curl -T filename http://curl.io/send/abc123Re: Curl.io – Share files from your terminal or ssh
#29I wonder what their file storage limits are. Can I send them /dev/random ?
My guess is 5GB; the maximum size of a single S3 put.
Re: Curl.io – Share files from your terminal or ssh
#30Yikes, this should really be accessible only via HTTPS. Copying commands from untrusted websites (or insecure connections) and pasting them into your terminal is not a good idea: http://thejh.net/misc/website-terminal-copy-paste
Don't know about you, but an SSL certificate does nothing to increase my level of trust of a website.
Without TLS, absolutely anyone along the link (not just curl.io) can inject some BS into your command line if you choose to copy-paste.
If you don't trust curl.io, fine. But without TLS the list of people you need to trust is not only curl.io, but everyone else in the tubes too.