News for hackers. Stuff that matters.

A comment on GitHub mirror compromise incident report. Parent comment

Re:GitHub mirror compromise incident report by IntelMiner on Wednesday July 04, 2018 @08:27PM (#17460149)
GNU rm I believe requires the --no-preserve-root flag these days, to prevent that command from happening by accident
[ Parent | on HN ]
Re:GitHub mirror compromise incident report by justinsaccount on Wednesday July 04, 2018 @08:49PM (#17460232)
The shell expands

/*

, not rm.

It expands to /bin /etc /lib and such and is not covered by the sanity check.

[ Parent | on HN ]