News for hackers. Stuff that matters.

A comment on Security Flaws in Adobe Acrobat Reader Allow Gaining Root on macOS Silently. Parent comment

Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by JadeNB on Thursday May 14, 2020 @04:40PM (#23185115)
Because, like every other sync solution out there, though for what reason I don't know, it fears the consequences if you are allowed to name the sync folder yourself.
[ Parent | on HN ]
Re:Security Flaws in Adobe Acrobat Reader Allow Gaining Root... by Reelin on Thursday May 14, 2020 @04:52PM (#23185264)
Not perfectly analogous to specifying folder names yourself, but the infamous Steam deletion bug comes to mind. (https://github.com/valvesoftware/steam-for-linux/issues/3671) Caused by a failure to use readlink (plus not sanity checking variable contents), so introducing a symlink would break it.
[ Parent | on HN ]