For Ubuntu 24.10, we should patch bash so that when it's given content on stdin, it checks the process tree and if the sending process is curl, launches x-www-browser with a page on basic Internet safety instead of executing the command.
Conversation
Notices
-
Embed this notice
vorlon (vorlon@mastodon.social)'s status on Saturday, 27-Apr-2024 00:38:33 JST vorlon -
Embed this notice
see shy jo (joeyh@hachyderm.io)'s status on Saturday, 27-Apr-2024 00:38:33 JST see shy jo @vorlon curl | /lib64/ld-linux-x86-64.so.2 /dev/stdin
(no it doesn't actually quite work ... sadly?)
Haelwenn /элвэн/ :triskell: likes this. -
Embed this notice
Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Saturday, 27-Apr-2024 00:41:52 JST Haelwenn /элвэн/ :triskell: $ curl -s file:///usr/bin/uname | \ls -Ll /dev/stdin prw------- 1 haelwenn haelwenn 0 Apr 26 17:40 /dev/stdin Gah.
-
Embed this notice