News for hackers. Stuff that matters.

A comment on Transmission BitTorrent Client OSX/Keydnap Malware Incident Q+A. Parent comment

Re:Transmission BitTorrent Client OSX/Keydnap Malware Incide... by raldi on Thursday September 01, 2016 @06:24AM (#12404151)
Why would copying two strings to the clipboard lead to an infinite loop?
[ Parent | on HN ]
Re:Transmission BitTorrent Client OSX/Keydnap Malware Incide... by stable-point on Thursday September 01, 2016 @06:32AM (#12404184)
If you have `pbpaste | sh -` on your clipboard and then paste it into a terminal, it'll continually execute itself.

(`pbpaste | sh - | pbpaste | sh - | pbpaste | sh - | ... | pbpaste | sh -`)

[ Parent | on HN ]
Re:Transmission BitTorrent Client OSX/Keydnap Malware Incide... by IanCal on Thursday September 01, 2016 @07:11AM (#12404335)
It won't, but running

    pbpaste | sh -
Means it's taking whatever is in my clipboard and executing it.

I had replaced what I wanted to execute with just "pbpaste | sh -"

So it passed "pbpaste | sh -" to the sh to run. Which would have then taken "pbpaste | sh -" and passed it to sh to run, which ...

[ Parent | on HN ]
Re:Transmission BitTorrent Client OSX/Keydnap Malware Incide... by Hates_ on Thursday September 01, 2016 @06:33AM (#12404190)
I believe it would the same as this I think?

  pbpaste | sh - | sh - ...
[ Parent | on HN ]