Researchers disclose a 55-year-old vulnerability affecting macOS, Windows and Linux. Exploitation is trivial and requires no special tools. No patch exists.
  • some_guyEnglish
    2·
    6 hours ago

    If you’re smart, like me, you’ll unplug your devices immediately. Failure to do so ensures your doom.

      • we are all@crazypeople.onlineEnglish
        552·
        2 days ago

        in my defense, my team is always trying to be mr. achiever and drop the latest vulnerability. I got a glimpse of this one and got excited since I hadn’t heard of this “new named threat”. when I tried reading further to prepare my draft… the reach and exposure of this vulnerability became clear.

        also, to mitigate this, we’d have to hotpatch layer 8.

        • not_IO@lemmy.blahaj.zoneEnglish
          1·
          1 day ago

          u shouldn’t play the achiever game with your team, it’s an exploitation tactic and it consumes every fiber of your being

          • we are all@crazypeople.onlineEnglish
            11·
            1 day ago

            my carcass has long been picked clean but I thought" hey maybe the old man still can find surprises those whippersnappers haven’t yet."… thinking “ohh lemmy stumbled upon something! beans!” (I think you have to say this when you reference lemmy now)

          • we are all@crazypeople.onlineEnglish
            2·
            1 day ago

            justifying my behavior because I was motivated by the aforementioned external behaviors by establishing their trends of beating me to the aforementioned punch.

            WOOO I need to let autocorrect hit that aforementioned word again yeah soo satisfying.

      • Agent641@lemmy.world
        25·
        2 days ago

        I’ve sent a company wide email telling everyone I don’t want to be sysasmin anymore.

        It has nothing to do with the CVE

        • JoeBigelow@lemmy.ca
          7·
          2 days ago

          I’m here cautiously making sure it’s a joke that I don’t understand. Problem exists between keyboard and seat.

          • Tehhund@lemmy.worldEnglish
            8·
            2 days ago

            Not even that, it’s not a problem at all. They’re just saying that when you open a terminal program you get access to the shell. That is exactly the point of a terminal program. It’s a bit like “exclusive, shocking report: water is wet!”

            I mean, I guess part of the joke is if an attacker can get into your computer they can do nefarious things, but that’s not as funny.

  • micgerne@lemmy.dbzer0.com
    1153·
    2 days ago

    I just tested this exploit, I was easily able to remove the french language pack by typing “rm -fr /*”

    • a_jeering_serpent@sopuli.xyzEnglish
      362·
      2 days ago

      Don’t forget the —no-preserve-root flag or you’ll get an index out of bounds when deleting the recipe for five-root-puree

        • a_jeering_serpent@sopuli.xyzEnglish
          2·
          8 hours ago

          Oh i was kind of going for the opposite. 😈

          BTW use caution with your glob there, that only does what you described if the folder has contents, if it doesn’t, rather than getting nothing you’ll get back the parent directory, at least in bash. I’m not one of the cool zsh kids.

          • yetAnotherUser@discuss.tchncs.de
            1·
            7 hours ago

            Huh, are you sure or am I just stupid?

            [user@device Documents]$ mkdir test
[user@device Documents]$ cd test
[user@device test]$ ls ./*
ls: cannot access './*': No such file or directory

            Same behavior with * instead of ./*.

            • a_jeering_serpent@sopuli.xyzEnglish
              2·
              6 hours ago

              I may be the stupid one, i’m sure there’s a related gotcha here under some condition, but objectively not the one i described. Sorry, did not intend to waste anyone’s time and i do appreciate the response back to set me straight.

  • hanke@feddit.nu
    1471·
    2 days ago

    Just tried it out. It is real. And really simple to do.

    Scary stuff. Tossing my machines in the bin tomorrow.

  • Allero@lemmy.today
    271·
    2 days ago

    You should really place a /j somewhere before someone thinks they’re screwed

  • Sina@beehaw.orgEnglish
    17·
    2 days ago

    I still find it funny that in the distant past an engineer thought pasted commands should have some ~~ characters added, so the user has to delete them & think about their actions while pressing their arrow or various faster ctrl+ keys …

  • ImgurRefugee114@reddthat.com
    91·
    2 days ago

    Getting a shell is bad, but what makes this worse is the insecurity of popular Linux tools that can be used for privilege escalation.

    The sudo program has had a known vulnerability since its inception. The developers are incompetent. In some configurations, all you need is the user’s password and you can execute arbitrary code as root. Sometimes, no password is needed at all.

  • stembolts@programming.dev
    301·
    2 days ago

    Holy shit, my computer is infected. I opened my terminal and typed “sudo ls -halR /” and it showed me every file on my computer. Oh my god.

    • laranis@lemmy.zip
      21·
      2 days ago

      I took the “us” in your statement to be “humanity” and it sparked an unexpected feeling of hope.

  • ns1@feddit.ukEnglish
    45·
    2 days ago

    Nobody show this to my boss please, they’ll be asking me why I haven’t fixed it yet

  • feddylemmy@lemmy.world
    35·
    2 days ago

    Phew! Just got done patching all my servers. The main IOCs are

    • C:\Windows\System32\cmd.exe
    • /bin/bash
    • /bin/sh