A breakthrough in C/C++ dependency management

lcamtuf’s thing

SubscribeSign in

A breakthrough in C/C++ dependency management<br>Apr 25, 2026

52

10

Share

Are you a C or C++ programmer? Are you envious that other languages keep hogging the limelight when it comes to supply chain attacks?<br>If you answered “yes” to both questions, I bring you revolutionary new technology — remote, on-demand includes in GCC and clang:<br>#include

int main() {<br>char* x = leftpad("Hello world!", 16);<br>printf("[%s]\n", x);

To use this exciting functionality, simply download the official remote_includes.tgz package from my website, compile it with ./build.sh, and then start compiling programs with:<br>LD_PRELOAD=./remote_includes.so gcc demo_program.c

…or:<br>LD_PRELOAD=./remote_includes.so clang demo_program.c

Of course, this technology is protected by military-grade security, as signified by the following symbol: 🔒.<br>Thank you and God bless!

Subscribe

PS. It works, but don’t use this! PPS. If you do, you will die, and it will hurt the whole time you’re dying.

52

10

Share

Discussion about this post<br>CommentsRestacks

Alex<br>Apr 26Edited

Pinned

Why even bother with a local file?<br>LD_PRELOAD=./remote_includes.so gcc https://example.com/software.c && ./a.out<br>Using a compiled language makes it so much faster than curl | sh.

Reply

Share

Ben Hekster

Apr 26

Liked by lcamtuf

I’m overcome by intrusive thoughts to try it<br>What’s the worst that could happen?

Reply

Share

1 reply by lcamtuf

8 more comments...

TopLatestDiscussions

No posts

Ready for more?

Subscribe

© 2026 lcamtuf · Publisher Privacy<br>Substack · Privacy ∙ Terms ∙ Collection notice

Start your SubstackGet the app<br>Substack is the home for great culture

This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts