JamonBear

joined 2 weeks ago
[–] JamonBear@sh.itjust.works 1 points 10 hours ago (1 children)

Why do you think it's different?

[–] JamonBear@sh.itjust.works 4 points 11 hours ago (1 children)

Agreed.

Also gtfobins is a great resource in addition to shellcheck to try to make secure scripts.

For instance I felt upon a script like this recently:

#!/bin/bash
# ... some stuff ...
tar -caf archive.tar.bz2 "$@"

Quotes are OK, shellcheck is happy, but, according to gtfobins, you can abuse tar, so running the script like this: ./test.sh /dev/null --checkpoint=1 --checkpoint-action=exec=/bin/sh ends up spawning an interactive shell...

So you can add up binaries insanity on top of bash's mess.

[–] JamonBear@sh.itjust.works 36 points 3 days ago (3 children)

yt-dlp --sponsorblock-remove all <url> is the way. It turns playlist link into nicely named, curated video files awaiting to played by a regular video player

[–] JamonBear@sh.itjust.works 1 points 2 weeks ago

Idk about german tracker in particular, but for non-english content, here is good entry point: https://fmhy.net/non-english