Hacker News new | ask | show | jobs
by koolba 3436 days ago
> My cursory opinion of this is that it's the worst idea ever I've ever seen make HN's front page.

Not disputing that it's the worst but it could be even more worse.

It's missing the key component: a curl | bash install and upgrade script running over HTTP (not HTTPS). In this case it'd be extra hilarious as upgrades would presumably go over your existing VPN connection which could then hijack the script and run arbitrary code on your machine.

2 comments

This looks like a node version of the previously submitted go tool `autovpn`, which I commented on previously:

https://news.ycombinator.com/item?id=13454960

This code also writes remote-content to a file, and then passes that to openvpn. Scary stuff.