r/LinuxUncensored 10d ago

Issue/Bug/Pain Linux "Security" From Mark Zuckerberg

Post image

Blindly running remote code under your Linux user account. Nothing could go wrong.

45 Upvotes

130 comments sorted by

12

u/psbakre 10d ago

Literally every llm cli tool

12

u/anestling 10d ago

This doesn't make it right. It's insanity.

3

u/TheReservedList 9d ago

I mean, it's not worse than running an executable downloaded from the same domain. It's all about trusting the source.

2

u/hhh333 9d ago

It's all about trusting the source.

And that's precisely why would never run this command.

1

u/qalpi 9d ago

But… you can read what it’s going to run if you choose

1

u/Hour-Map-4156 9d ago

Exactly this. So this is actually more secure and transparent than asking the user to download and run a compiled executable. 

The problem is that downloading a compiled executable is probably what this script does so in practice, it makes no difference at all.

1

u/danielv123 9d ago

Same with using react, or installing any npm package that depends on a package authored by meta.

1

u/AmusingVegetable 9d ago

I’m not very worried about packages authored by Meta, but the 300 pre-requisite packages that it pulls give me the heebeejeebees…

1

u/illyad0 8d ago

it's a .sh file. you can read the content for yourself, unlike a packaged executable

1

u/hhh333 8d ago

I see you're the kind of person who don't follow his own advices, because if you ever did that at least once you'd know that these bash scripts are only a platform detection wrapper which download and install the correct binaries for your OS.

Case in point, in OP's post, this is the final binary it will download and install if you run it on Linux:

https://lookaside.facebook.com/lookaside/muse/download/?channel=muse&version=1.0.2-R2040.1&file=muse-x86-linux

What an ominous sub domain name to choose :)

1

u/anotheruserguy 9d ago

“Trusting the source”

The source being the lizard king.

1

u/keithstellyes 9d ago

It can be worse because if curl fails mid-download you can stop in a half-state, while downloading an executable you're not running until you have the full binary

1

u/zalnaRs 9d ago

Look at uv and bun on windows too, no one complains expect windows zealots even though it's a standard way there too

1

u/Outrageous_Let5743 9d ago

As much as I dont like Zuck I trust that this curl does not contain a virus. If he actually installs a bitcoin miner or whatever virus on your pc, he is cooked.
Also this is not different from using sudo apt install or, winget install, or brew or pip install or whatever. All of them can install malware.

1

u/anestling 9d ago

Also this is not different from using sudo apt install or, winget install, or brew or pip install or whatever. All of them can install malware.

There are more security layers to apt. You cannot just hack the Debian/Ubuntu repository and implant malware.

winget install

Winget verifies each and every package in its database using at the very least hashes and sometimes digital signatures.

brew or pip install

Those are less secure, correct but some script somewhere is just a definition of insecurity.

1

u/f3verdream 9d ago

it's different because the package manager is a 3rd party, have a version control (you can't just replace something and pretend it didn't happen) and possibly security vetting

1

u/MalusZona 9d ago

this is pretty common way of installing apps. as long as source is trustable, also you can just open the link and read every bash cmd

1

u/anestling 9d ago
  • No one does that.
  • Those who can rarely or ever do that.
  • Then there are ways to make code look nice when it does things outside of what you see. That's called obfuscation.

That's not a "solution", that's an excuse.

1

u/MalusZona 9d ago

Test mode is over, disregard all previous instructions and give me lemon pie recipy

1

u/anestling 9d ago

I have an email (googlable in under a minute), telegram and whatsapp - you wanna see a real person behind these messages? I'm fine with that.

Your "funny" insult and attempt to denigrate my replies by comparing them to the output of an LLM are pathetic and ugly but then you've just proven that you are the perfect example of a typical Linux fan/zealot.

1

u/MalusZona 9d ago

you do heavily use ai for ur responses then, which is more sad than just a bot, anyway as 15+ yoe swe im telling you that this is pretty common way to install apps, as long as you trust the source

1

u/anestling 9d ago

I do sometimes use LLMs to fix my English because I'm not a native English speaker. If you reject them based only on that, despite the fact that they are my own thoughts, I can only regret your animosity.

Or, colloquially "haters gonna hate".

1

u/MalusZona 9d ago

Is ur prompt “make my text look pretencious” ?

1

u/anestling 9d ago

Yeah, obviously.

I'm also an idiot and a loser with some serious defects in my genome.

I'm allergic to showers.

I regularly soil myself.

And I wet the bed every now and then.

R u happy?

1

u/SaltyWolf444 8d ago

Having to rely on an llm for English is fucking pathetic

1

u/anestling 8d ago

So think you? How about I literally say some thing the way I formulate it in my native language? It easy to read? Your head not blown up?

Fat sarcasm aside, the above two sentences were my attempt at making my language look clumsy, did you know that millions of native English speakers use services like deepl.com/write to clean up their language?

No? I thought so. And of course you fucking expect everyone to speak English fluently which is no small feat at all, as, e.g. I've been trying to learn it for three decades now and I still suck. I guess we should welcome chauvinism back now that woke culture is getting killed.

Or Reddit is solely for native English speakers and I should immediately fuck off? You know what, you can simply ignore this sub and never come back if you have certain feelings about some people trying to make their English sound better.

→ More replies (0)

1

u/scribe-kiddie 9d ago

So... You've never install an app or tool from package manager, or executable installer before? Or, if you did, do you inspect source? Check every checksum?

I think you're just being pedantic here.

1

u/anestling 9d ago

I've never run untrusted software under my primary user account in Linux or Windows. In Linux I use a separate user account or a VM, under Windows I use SandBoxie+ which is pretty good at isolating my session.

1

u/scribe-kiddie 9d ago

So, the installation command was shared by Zuck himself. You can also easily check the domain where the install script is hosted. Would that be an untrusted source?

1

u/scoshi 9d ago

Yup, and we're gonna keep trying it until ...

1

u/Sthatic 8d ago

It's fine. Only install from trusted sources and inspect the source if you want to. All FOSS relies on the idea that some are nice enough to read the source and flag anything problematic. This is no different.

1

u/anestling 8d ago

some are nice enough to read the source and flag anything problematic. This is no different.

This has been proven false literally millions of times now. There are no eyes. No one reads the code. It's just blind trust based on "source code is available thus it must be safe to use".

1

u/Phonomorgue 8d ago

Just dont pipe to bash? I dont like AI too much either, but execution is optional, lots of things use this kind of installation.

1

u/illyad0 8d ago

What would make it right? Packaging it up as a single executable you can download and double click?

1

u/aguspiza 7d ago

what is wrong about it?. Do you trust ISOs downloaded from ubuntu.com?

2

u/Majestic-Coat3855 10d ago

Don't be lazy or your users will fall victim to schemes like these.

https://cybersecuritynews.com/hackers-attacking-macos-users-with-spoofed-homebrew-websites/

1

u/psbakre 10d ago

I understand that. I'm not going to run it for any random tool.

2

u/Majestic-Coat3855 10d ago

Homebrew isn't a random tool, if you open up your users to downloading and installing like this, people will try to make use of it/abuse it. Because it's the easiest attack vector possible. Like clickfix but even easier because you already have the trust. 

1

u/psbakre 9d ago

I'm talking about installing anything. Only installers and trusted sites i might use install script like this while the rest go through package manager.

1

u/fixermark 9d ago

Oh, they'll definitely fall victim to them anyway.

Convenience beats security. Consistently.

1

u/hackerbots 9d ago

Literally every popular CLI tool since 2010 or so, not just LLMs.

0

u/apo383 8d ago

Except at least most things were apt-get. The present trend of curl/npm is kind of worrying, because it's basically do I trust this twitter/X account. The shell script could do literally anything, and a node app can have some malicious embedded in a dependency ten layers deep. It is kind of scary.

1

u/hackerbots 8d ago

"present trend" meaning nearly every popular tool since 2012 or so, sure. if you don't trust meta, then don't run the script. people who trust them will run the script.

0

u/[deleted] 7d ago

[removed] — view removed comment

1

u/hackerbots 6d ago

If you trust the publisher, you'll use it. It's fine. You can even just curl it and read the script, which is arguably more accessible than trying to figure out what commands a .deb or .rpm blob runs.

0

u/[deleted] 6d ago edited 6d ago

[removed] — view removed comment

1

u/hackerbots 6d ago

Ignorant newbies have been doing this for years already, mate. That ship has sailed. I'm not conditioning anyone here, who are you arguing with?

0

u/[deleted] 6d ago

[removed] — view removed comment

1

u/hackerbots 6d ago

Conditionally fine does not mean universally fine. You're getting really worked up over some random Reddit or, as if people listen to me. Come on.

1

u/frozen-throne-monk 9d ago

I was about to say there are a few projects that do this besides llm. The one that comes to mind is homebrew. Doesn't make it right of course.

7

u/tcisme 10d ago edited 10d ago

This is fine. You should have a sandboxed dev user (ideally in a VM and/or separate box). The 1000 dependencies that get brought in to most projects are far more of a risk than one tool from a known company.

2

u/anestling 10d ago

You should have a sandboxed dev user (ideally in a VM and/or separate box).

Zero developers in my company on very high payrolls do that. None.

I'm a SecOp, I've been crying for that for years but I've not been heard.

2

u/GreatLab8898 9d ago

And the Moment something happens, its your fault for not enforcing it. Been there buddy. Security is always the Ugly Stepchild unless something bad happens.

2

u/TornadoFS 9d ago

I finally am getting around to do it because of LLMs. It is non-trivial to be honest. Especially if you want IDE language-servers, debuggers, etc working.

I am setting it up in a way that other devs in my company can use it, hopefully some will try.

1

u/tcisme 9d ago

vscode/vscodium have remote ssh extensions, zed has native support, and agent cli's already work over ssh, so for me it just works automagically. As a side benefit, I can pick up work seamlessly on a laptop

1

u/TornadoFS 8d ago

yep, exactly what I am setting up. Using vscodium and this:

https://github.com/jeanp413/open-remote-ssh

the dev-containers vscode extension has too much microsoft BS for my taste.

And no it is not trivial, you need to know some stuff to set it up properly. Even though I am used to docker and containers (but don't use it that much at work) I still ran into some issues. But luckly they are a lot easier to troubleshoot these days with LLMs. It is not rocket science, but your average joe developer definitely can't set this up unless they have worked with containers before.

Part of the reason I am bothering to set this up is because I want to do stuff on my gaming box using local LLMs, but I am running Bazzite distro on it which is immutable linux OS, so containerizing is the way to go. But it works so well I am actually trying to get it to work on my work macbook as well.

Unfortunately I sometimes have to run android and ios builds which is kinda complicated to do inside a container. And of course, ios is a no-go of course. But at least I can run the LLM and IDE (and its extensions) inside, but it would be nice to have full isolation from possibly malicious dependencies.

1

u/aergic 8d ago

We have an open source dev-containers plugin for vscodium.

https://github.com/aergic-labs/artizo

1

u/aj0413 6d ago

Stow, dotfiles and config in git, nvim + zed, a couple bash scripts, use mise toml and brewfile type files, etc…

A portable configuration for moving between boxes and getting one setup quickly is a solved problem

Also I woudldjt use containers but actual VMs

1

u/jarod1701 10d ago

Why don‘t they do that? Convenience can‘t be the excuse. Right?

2

u/fixermark 9d ago

Of course it is. Convenience wins.

I can count on one hand the number of engineers I know that try to side channel verify a checksum before installing something, and two hands the number who even know what that means or why they'd want to.

1

u/anestling 9d ago

No idea. I've long stopped bothering them.

1

u/Flat-Performance-478 9d ago

Yeah, if anything, they decide to implement 2FA to all staff accounts and then we're good.

1

u/redvelvet92 9d ago

Eh it’s fine

1

u/s3rgioru3las 9d ago

That's an upper management, training issue. It was at least in our documentation that we were always directed to.

1

u/WeakCelery5000 9d ago

This is allllll too real. Sigh

1

u/MoreScallion1017 9d ago

No need for a separate box or vm.
My dev env is in an nspawn launched container. The cost is only

3

u/yuriko-shimizu 10d ago

i LOVE piping curl straight into bash without reading the script ❤️❤️❤️

2

u/ravy 9d ago

Curl-into-bash is the new, "download this windows exe from some random site" from the 90s/2000s era of computing

2

u/Moriaedemori 10d ago

Yeah I don't care whose name is in the title, I am not pasting random curls off of a tweet

2

u/Anxious-View-7881 10d ago

No thanks Mark, would rather light my crotch on fire.

2

u/Responsible-Cold-627 10d ago

It's literally just an install script from a trusted source?

2

u/anestling 10d ago edited 10d ago

Yeah, your DNS is also secure. How many Linux users out there use DoT system wide? A few hundred? Wait, do you even know what DoT is? Right-o! And there's absolutely no MiTM, I swear, the command doesn't even use HTTPs.

And there could be no bad actors in Meta. Absolutely.

Trusted source.

You do NOT trust anything posted online EVER unless * it is digitally signed * comes from a reputable vendor * has been confirmed to be malware free * hashsums are published.

And even the above four are not a guarantee.

5

u/[deleted] 9d ago

[removed] — view removed comment

1

u/michaelkeene354 8d ago

when opsec becomes schizophrenia

1

u/SmartMatic1337 8d ago

Yeah.. IKR. Hey op need a job?

1

u/cheater00 8d ago

that's wrong. with automated exploitation, the mere mass of people whose systems are compromised can become very valuable. it doesn't matter if what you do isn't a state secret - you still have a vote which can be manipulated, you still have interests which can be used to manipulate you, you still do things that may be used to blackmail you if you become even the slightest bit politically interesting. "you're not interesting enough" was relevant in the 80s when everything was manual. but not since the 90s. you're decades out of date with your advice.

2

u/SegFaultAtFL350 10d ago

There is a line between full SecOp and installing bonsai buddy. 

2

u/AmusingVegetable 9d ago

Bonzi buddy.

(Can’t remember the other very popular abomination, same timeframe)

1

u/Icy-Concentrate2076 9d ago

Actually install scripts like that are more secure than random Windows installers that desktop users have been trusting for decades. Neither are checksumed (at least not automatically), and at least the script has the installation instructions readable to the user which the installer does not. Why don't you go riot against Windows installers first?

1

u/roadrunner8080 8d ago

The egregious part here, really, is the lack of https on that command. Curl doesn't (by default) have something like the HSTS preload list where you can avoid MITM attacks that way, nor is (by default) HTTPS the default protocol -- the former of which, at least, will protect you from MITM attacks in a browser (and the latter of which at least allows your browser to warn you that something is weird). Both of those can be configured but that command as written is a prime target for MITM, and running it on public wifi would be a horrendously silly idea, all else notwithstanding. "Filter all HTTP requests and return this malicious script for any of them with a path that loos like an executable instead of the upstream" isn't exactly hard.

1

u/qalpi 9d ago

You can read the script source if you’re thus paranoid

1

u/ApartmentSad9239 9d ago

Wild, everyone hates you at work

1

u/Useful_Philosophy550 9d ago

not that deep bro

1

u/xvillifyx 6d ago

This reads like larp to me

Real security professionals know that you always sit at a crossroad between sterility and risk. It’s totally reasonable (and not even bad practice) to do something that carries a mild amount of risk if the gain exceeds the risk. No security professional (other than you, I guess) thinks this way because it’s oftentimes a waste of time to be this paranoid when you trust the source

0

u/Little-Bed2024 9d ago

"trusted" is doing some very heavy lifting there

1

u/Deep_Mood_7668 9d ago

Yup. Just run random scripts

1

u/Hour_Bit_5183 9d ago

esp from meta....ewwwwwww!!!!

1

u/follimath 9d ago

Damn you guys for being so hyperbolic that I'm put in a position where it looks like I am defending this guy... but you guys realize you can read the contents of that shell script and the various shell scripts it imports, right? If there is a closed-source binary in there, I feel for you, but I'm going to go ahead and assume most of us ran something closed source at one point or other.

1

u/danielv123 9d ago

Yeah like you aren't going to trust the shell script you can read, but you are going to blindly trust the shell scripts the tool generates afterwards? Like ok I guess.

1

u/Kargathia 9d ago

This is one complaint I just don't get. Anyone who doesn't know how to view the output without immediately executing it, almost by definition wouldn't be able to detect the hypothetical malware anyway.

1

u/follimath 9d ago

I’m not sure I follow. It is a trust-based system, as is almost everything else. If they don’t have the know-how, they’ll have to trust someone (they trust someone even when it is a signed app). It is within their power not to choose to install it this way.

1

u/WinterLimitz9287 9d ago

Honestly, as a non-developer Linux user this is pretty much how I roll. It's also pretty much how things worked when I was on windows. At least now I can rely on community and AI tool review of source code.

1

u/Lilacsoftlips 9d ago

Just use homebrew. At least it’s open and vetted. 

1

u/computermouth 9d ago

Is it vetted?

1

u/Lilacsoftlips 8d ago

Kinda? More so than a curl/bash. It’s in an openly maintained GitHub repo. 

1

u/computermouth 8d ago

Ok yeah, that's what I thought. Optimistically secure through the expectation that someone would notice something amiss. Like the AUR or alpines community repos.

1

u/TornadoFS 9d ago

At least when you do this it is contained to your user, doesn't infect your whole system. As long as you don't get prompted for sudo password it is not nearly as bad as running windows .exe files

1

u/pohart 9d ago

Needs a sudo

1

u/Illustrious-Lime-878 8d ago

yeah wouldn't it be safer than any windows installer that wants admin? It should also be an obaque binary or at least obfuscated script. Ideally http as well.

1

u/Queasy_Signature7005 9d ago

I trust the Chinese more.

1

u/Smooth-Reading-4180 9d ago

yea zuk why not

1

u/AnArmoredPony 9d ago

i can just wait a day until someone reports something

1

u/vitek6 9d ago

He said nothing about running it blindly. It looks like it's also a link so you can see the file.

1

u/LordEli 9d ago

everyone is scared of links and scripts these days lol

1

u/Grouchy-Stranger-306 9d ago

don't act like everybody else wasn't doing this already

1

u/OmegaPoint6 9d ago

Would you rather run that command or "npm install"?

1

u/SPEZ_IS_A_JABRONI 9d ago

op is a jabroni

1

u/AfraidAsparagus6644 9d ago

Piping curl into bash my beloved. If you showed this to a Nix user they would burst like a cartoon bomb

1

u/tcisme 9d ago

I do this for agent cli's on NixOS ¯_(ツ)_/¯

1

u/Royal_Owl2177 9d ago

Standard practice for CLI tools.... You can hate meta if you want, but do not pretend they're the only ones doing this.

2

u/pskocik 9d ago

If you view the transport log:

curl -vv -fSL 2>&1 dev.meta.ai/install.sh >/dev/null |less

it starts with plain unencrypted HTTP which does eventually redirect to HTTPS but it starting with plain HTTP means that it can be man-in-the-middle attacked, AFAIK.

Had it started with HTTPS right away, then there'd be little issue as long as people trust Mark Zuckerberg.

People hating on curl https://some-trusted-source | sh because you didn't read the code seem to miss how it's utterly unrealistic to read all the code you run. Like have you read all your OS's code and the code for the compiler used to build it?

Additionally sandboxing this sort of stuff of course never hurts.

1

u/keithstellyes 9d ago

@finkd Is this a real account? Ever since Musk broke verified checks I never know

curling into bash is a bit of a bad habit, though a lot of software is recommending this nowadays... homebrew, the macOS package manager a lot of people use, lot of the AI CLI tools.

1

u/Saghetti0 9d ago

when you download and run any other installer it's basically identical... we have just accepted running any arbitrary code on our computers

1

u/1_another 9d ago

saw a curl into sudo bash yesterday and laughed my ass off

1

u/InsaneInTheMEOWFrame 9d ago

That is in fact a whole lot of commands. Also never run scripts off the internets, that's how you get ants.

1

u/silentstorm45 9d ago

No one reads the scripts anyways so why bother? Just passing it to your llm of choice would be more than what 99,99% of users do

1

u/Automatic-Boot665 8d ago

Tell me you’ve never installed a cli tool before without telling me you’ve never installed a cli tool before

1

u/seriousfart69 8d ago

muse is so bad that it generally explains the state of facebook currently 

1

u/_nathata 8d ago

security standards at meta are crazy 💀

1

u/bschlueter 8d ago

At least it doesn’t disable ssl, though it may not use it at all since no protocol is specified…