News for hackers. Stuff that matters.

A comment on You cannot cURL under pressure. Parent comment

Re:You cannot cURL under pressure by Sir_Cmpwn on Saturday October 12, 2019 @11:12AM (#21233746)
Heh, I was just trying to do the same:

https://sr.ht/O2oy.png

Ben: you can fix this by adding -monitor none to your qemu command line.

[ Parent | on HN ]
Re:You cannot cURL under pressure by Nextgrid on Saturday October 12, 2019 @11:19AM (#21233803)
Even with that disabled I still wouldn't trust it (QEMU devs didn't originally plan for its stdin to be attacker-controlled, so there could be subtle bugs even with monitor disabled - remember the GRUB bug where you could bypass the password with specific keystrokes). I would've personally made it to simulate a serial port to the guest and the browser-based console being connected to that.
[ Parent | on HN ]
Re:You cannot cURL under pressure by Sir_Cmpwn on Saturday October 12, 2019 @11:20AM (#21233809)
Yeah, that would be wise.
[ Parent | on HN ]