News for hackers. Stuff that matters.
Re:Alpine Linux 3.15 by dotancohen on Wednesday November 24, 2021 @02:06PM (#29333811)
Which is arguable an attack vector. Depending on how careless the user is, there is far more likely a chance that malicious code is found in .vimrc than is found in the VIM executable.
Re:Alpine Linux 3.15 by fragmede on Wednesday November 24, 2021 @02:20PM (#29334005)
sudoedit runs your editor as you, not root, so unless I'm misunderstanding you, no such attack surface exists.
Re:Alpine Linux 3.15 by masklinn on Wednesday November 24, 2021 @04:33PM (#29335426)
They’re probably referring to the attack surfaces of the extensions you have loaded in your normal configuration, as opposed to the probably empty environment of root.