bashonly's comments

On: Ask HN: Am I safe regarding xz?

[bashonly]

based on what is currently known, arch was never vulnerable to the backdoor that was discovered. arch doesn't patch sshd so that it links systemd like how debuntu/fedora do, which was a requirement for the backdoor.

ofc this doesn't rule out any as-of-yet unknown vulnerabilities in xz/liblzma.

On: Ask HN: Python library for robust URL retrieval with workaround strategies?

[bashonly]

https://github.com/yifeikong/curl_cffi

On: Posts, profiles, and user search are now available without login

[bashonly]

thank you!

On: Ask HN: What's happening with Gmail spam filtering?

[bashonly]

i used to have a custom domain email forwarded to gmail that would receive github notification emails and the same thing happened to me with those a couple months ago

On: It's Past Time To Stop Using egrep and fgrep Commands, Per GNU grep 3.8

[bashonly]

also noteworthy is that grep -P will now use PCRE2 instead of PCRE, which is potentially a breaking change for anyone using grep -P in their shell scripts

On: Remembering the best shareware-era DOS games that time forgot (2019)

[bashonly]

scorched earth is the only one of these i've played

i also loved worms, which felt like scorched earth with lemmings

On: Bibliogram, Open-source front-end for Instagram, is being discontinued

[bashonly]

for all of the requests to their api, it constructs a very long query string that is a basic fingerprint of your browser/os. then the query needs to be signed (or else the api returns a captcha), which is done by a blob of encrypted/obfuscated-beyond-recovery JS that uses a more comprehensive browser fingerprint to validate the query string and generate a token that is appended to the query. there's another required query param which involves an xhr to phone home so that presumably the fingerprints can be checked server-side. finally all of your fingerprint data is sent to their api where it lives happily ever after and you get some 15 second videos to watch

On: Ask HN: Can I see your scripts?

[bashonly]

shellcheck is so good it's even worth installing the 100+ required haskell libraries

[justin_oaks → bashonly]

I've always just run it as a docker command. Here's what's listed on the github page [1]:

    docker run --rm -v "$PWD:/mnt" koalaman/shellcheck:stable myscript

[1] https://github.com/koalaman/shellcheck

[rmadriz → bashonly]

If you're on Arch, you could install `shellcheck-bin` from the AUR.

On: Will Bun JavaScript Take Node's Crown

[bashonly]

i think element (matrix) could work for you. it can't do email notifications, but if you have the mobile client on your phone you can get push notifications.

On: How to write idempotent Bash scripts (2019)

[bashonly]

agreed w/ your general points, but passing arguments to bash functions does not work like this:

    errorHandler("ignore")

it should just be:

    errorHandler "ignore"

[julian_sark → bashonly]

You are certainly correct, thanks. I hastily typed this out, my bad.