Thread

Turn off Apple Intelligence on macOS 27 and get its disk space back

594 points · 406 comments · privacyisntdead

arialdomartini · 1791145038 · focus · HN ↗
Stop the curl | bash insanity.
<a href="https://nocurlbash.com/#en" rel="nofollow">https://nocurlbash.com/#en
1. packeted · 1791146306 · focus · HN ↗
  Great initiative. I recently got stung by an advert on reddit for "HBO Max for MacOS, 6 months free" from the official HBO user (don't get me started on how that slipped through). Front and center was a curl | bash copy to clipboard that obfuscated the payload source in base10. I knew better, but I think we've made this kind of thing way too acceptable. Of course it was malware and I realized the instant I pressed enter. Thankfully I didn't give it my password and immediately disconnected from the internet and killed the machine. I'm genuinely concerned these kind of attacks are going to become much more commonplace with AI, plus the ability to inject malicious code in to things that get run by trusted scripted installers.
  1. swozey · 1791146443 · focus · HN ↗
    They all dump env and ship it off so check for any keys you might have had in there if anything was able to send at all.
  2. andelink · 1791147374 · focus · HN ↗
    You curled and executed bash code allegedly from _HBO_?
    [deleted] · 1791155044 · focus · HN ↗
    [deleted]
  3. Dylan16807 · 1791160263 · focus · HN ↗
    It's easier to walk someone through a single command than adding a software repository, so it's a risk factor for someone that isn't paying attention or doesn't know what they're doing. But with that little attention/knowledge the complaints on this page are unlikely to save you.
    And if you're in the state of mind to consider the security nuances of curl|bash verses other install methods, you're already past the "should I be installing this?" question and the complaints on this page won't save you. The delay is the thing mostly likely to make you rethink.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.