@mxcl@ShamashAran The script may serve different content whether you load it with a browser vs curl. Even with curl the script can induce a pause that tells the server whether it's being piped to bash, and serve different content if it's piped.
curl|bash is never safe.
@steren > I am willing and available to provide feedback on this Cloud Run ssh feature during the January/February timeframe.
But it doesn't say *which* January/February, so I guess it's okay
The pernicious problem with this is of course folks who think they're top-rights when they're actually top-lefts.
The solution is to codify judgment and enforce it. Mechanically if you can, agentically if you can't. Quickly and automatically in either case.
Four types of people at every company now
yes, people get 10x better when the go from bottom right to top right
but also, people get 10x worse when they go from bottom left to top left
@ibuildthecloud The whole top section of my CLAUDE.md is about how we're both fallible and to push back on each others' assertions if evidence suggests otherwise. I don't know if it helps, but I haven't seen it asserting upstream bugs like it used to.