You cannot cURL under pressure

Re:You cannot cURL under pressure by Nextgrid on Saturday October 12, 2019 @11:08AM (#21233718)

Just FYI, there's a way to get to the QEMU console with a certain keyboard shortcut. There could be potential for mischief (if you are logging the sessions look at the one that ended just now with "too much data written to the terminal", that was me trying to attach the host's /etc/passwd as a raw disk image to the VM).

[ Parent | on HN ]

Re:You cannot cURL under pressure by Sir_Cmpwn on Saturday October 12, 2019 @11:12AM (#21233746)

Heh, I was just trying to do the same:

https://sr.ht/O2oy.png

Ben: you can fix this by adding -monitor none to your qemu command line.

[ Parent | on HN ]

Re:You cannot cURL under pressure by Nextgrid on Saturday October 12, 2019 @11:19AM (#21233803)

Even with that disabled I still wouldn't trust it (QEMU devs didn't originally plan for its stdin to be attacker-controlled, so there could be subtle bugs even with monitor disabled - remember the GRUB bug where you could bypass the password with specific keystrokes). I would've personally made it to simulate a serial port to the guest and the browser-based console being connected to that.

[ Parent | on HN ]

Re:You cannot cURL under pressure by Sir_Cmpwn on Saturday October 12, 2019 @11:20AM (#21233809)

Yeah, that would be wise.

[ Parent | on HN ]