curl | bash | hacked: The Unseen Dangers in Your Dev Lifecycle | Steve Poole (EN)

curl | bash. That one-liner doesn’t just install a tool; it can hand over control of your machine. And here’s the uncomfortable truth: most modern supply chain attacks start exactly like this. Not in the data centre. Not at the firewall. On your laptop, because you didn’t stop to check what code you were running. Attackers know this. They hide in Git hooks, IDE plugins, build scripts, postinstall steps. Code that looks routine but executes with your permissions that exfiltrates secrets, plants backdoors, compromises pipelines, and your team before you even notice. The weak link is no longer the network perimeter. It’s the developer who clicks “install” without thinking. This talk will walk through real-world examples of how a single careless installation can spiral into a full-blown supply chain breach. And then we’ll cover the defences you need to build into your workflow: isolation, dependency hygiene, short-lived credentials, and constant monitoring. If you write code, this is your fight. The attacker is already in your toolchain. The only question is whether you’ll notice before it’s too late. ➜ Subscribe to JAVAPRO and never miss an update: https://bit.ly/YouTube-JAVAPRO-subscribe ▬ About us: ▬ JAVAPRO is the magazine for professional, real-world Java development. Beyond the publication, JAVAPRO organises the annual developer conference JCON, which focuses on Core Java, Enterprise Java, Microservices, AI, APIs, and frameworks. On this channel, you'll find interviews, sessions, tips & tricks, and everything a Java developer could ask for. ➜ Read JAVAPRO online or download the PDF: https://javapro.io ➜ Join the next live training session: https://javapro.io/training/ ▬ Follow us on social media: ▬ Twitter: https://x.com/JAVAPROmagazin LinkedIn: / 75505519 ➜ Thanks for watching – subscribe for more Java!