News for hackers. Stuff that matters.

A comment on Security Flaws in Adobe Acrobat Reader Allow Gaining Root on macOS Silently. Parent comment

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by derefr on Thursday May 14, 2020 @04:16PM (#23184809)
"Folder Location" = "location where a folder will go." Like when choosing where to unzip something, or where to create a new library bundle in Photos/Music.
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by toasterlovin on Thursday May 14, 2020 @04:29PM (#23184961)
I get that now. But it’s trying to sync a folder, so why not just point to the folder it’s syncing?
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by JadeNB on Thursday May 14, 2020 @04:40PM (#23185115)
Because, like every other sync solution out there, though for what reason I don't know, it fears the consequences if you are allowed to name the sync folder yourself.
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by Reelin on Thursday May 14, 2020 @04:52PM (#23185264)
Not perfectly analogous to specifying folder names yourself, but the infamous Steam deletion bug comes to mind. (https://github.com/valvesoftware/steam-for-linux/issues/3671) Caused by a failure to use readlink (plus not sanity checking variable contents), so introducing a symlink would break it.
[ Parent | on HN ]