Skip to content

v0.14.1

Choose a tag to compare

View all tags
@batrapulkit batrapulkit released this 20 Oct 08:41
v0.14.1
416f2f8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Scripts are read however they're run

  • Downloads by redirect count like -o. curl URL > x.sh, curl URL >> x.sh, wget -qO- URL > x.sh and iwr URL > a.ps1: run in the same line, or later in the conversation, they wait for a person.
  • A shell or PowerShell script is read line by line, however it's run: a full path, source x.sh, . x.sh, exec ./x.sh, sudo bash x.sh, pwsh -File x.ps1, with any name or extension. Before, only sh x.sh and ./x.sh were read.
  • Scripts in other languages (Python, Node...) aren't read. One the agent wrote in this conversation now waits for a person whether it was written with its edit tools or with a shell command (cat > x.py <<EOF, echo ... > x.js, tee). One that was already on disk runs like any other program; THREAT_MODEL.md says so.
  • uv run x.py (and poetry, pipenv, pdm, hatch, rye) is a script run, and powershell -ExecutionPolicy Bypass -File x.ps1 is read as x.ps1.

The reported-bypass list is now 31 of 31 stopped (11 new cases), with everyday work unchanged.

Upgrade: run the install line again, or pipx upgrade squidbrake.

Install this version (0.14.1)

Windows (PowerShell):

$env:SQUIDBRAKE_VERSION="0.14.1"; irm https://pilots.squidbrake.com/install.ps1 | iex

macOS / Linux:

curl -fsSL https://pilots.squidbrake.com/install.sh | SQUIDBRAKE_VERSION=0.14.1 sh

With pip: pip install squidbrake==0.14.1. Docker: docker pull ghcr.io/batrapulkit/squidbrake:0.14.1

Running the line again without SQUIDBRAKE_VERSION goes back to the newest. Every version:
https://github.com/batrapulkit/squidbrake/releases

Assets 2
Loading