Fi, infosec-aspected 🏳️⚧️
The big cups thing is absolutely zero relevance to home users, datacenter users, or....honestly pretty much everyone.
The last time I saw a workflow involving cross-network-boundary printing involved a guy running an office in Nicaragua who was interacting with some governmental office that insisted on doing it that way, back in like...2016?
Fi, infosec-aspected 🏳️⚧️
Like, genuinely:
If you are vulnerable to this, you are vulnerable to this on purpose.
Fi, infosec-aspected 🏳️⚧️
Also, reading this writeup?
You have to -take specific action- to -be- vulnerable.
It's not RCE when the user has to initiate the action, fuckhead.
Fi, infosec-aspected 🏳️⚧️
Remediative infosec concepts time here:
RCE is when you, remotely, as an attacker, can execute code on the machine WITHOUT the user's intervention.
Fi, infosec-aspected 🏳️⚧️
The one place I can think of that might even encounter this threat surface is some of the universities, because they have peculiar ideas about what's appropriate to put on publicly routable networks.
Fi, infosec-aspected 🏳️⚧️
But, from a production standpoint?
If you're vulnerable to this, you've done a lot of shit wrong, and made an effort to do a lot of shit wrong.
Fi, infosec-aspected 🏳️⚧️
Consulting gets you some wild stories lol.
Fi, infosec-aspected 🏳️⚧️
Otherwise it's just sparkling phishing.
Fi, infosec-aspected 🏳️⚧️
"Oooh, I tricked the user into running my program lololololol"
Grow up and get a real fucking job.
Haelwenn /элвэн/ :triskell:
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.