Look before you paste from a website to terminal

Re:Look before you paste from a website to terminal by martin-adams on Thursday January 26, 2017 @05:55AM (#13490346)

Here's a question, could such an exploit be achieved using something like Stack Overflow?

[ Parent | on HN ]

Re:Look before you paste from a website to terminal by dspillett on Thursday January 26, 2017 @06:27AM (#13490494)

Probably not due to the limited markup options available.

It would almost certainly be possible form a great many similar forums and bulletin-board like sites though.

[ Parent | on HN ]

Re:Look before you paste from a website to terminal by Klathmon on Thursday January 26, 2017 @09:53AM (#13491813)

Could you get away with a more limited version by abusing Unicode?

With so many "unprintables" combined with things like the RTL and LTR control characters I think it would be possible on some level.

[ Parent | on HN ]

Re:Look before you paste from a website to terminal by beejiu on Thursday January 26, 2017 @08:41AM (#13491183)

Yes. If you have multiline code, you can just add whitespace to the first line and it will appear outside of the code element. At least OS X, you cannot see a scroll bar.

[ Parent | on HN ]

Re:Look before you paste from a website to terminal by marcinkuzminski on Thursday January 26, 2017 @07:31AM (#13490780)

Depends on the markup extensions, but other websites that allows embedded notes could be also a attack vector.

[ Parent | on HN ]

Re:Look before you paste from a website to terminal by jazoom on Thursday January 26, 2017 @06:05AM (#13490394)

Good question. How much markup do they allow?

[ Parent | on HN ]