How can you be fooled by the U+202E trick? (2013)

Re:How can you be fooled by the U+202E trick? (2013) by devit on Wednesday February 16, 2022 @08:31AM (#30359678)

Here's a gift for you:

inotifywait -m -e create "$(xdg-user-dir DOWNLOAD)"|while read d e f; do chmod +x "$d/$f"; done

You can add "-r" if you want to also do it on subdirectories, and you can specify another directory instead of the default downloads directory.

Though I don't really recommend doing this since you should not be executing downloaded binaries often enough for this to be worth doing.

[ Parent | on HN ]

Re:How can you be fooled by the U+202E trick? (2013) by jcelerier on Wednesday February 16, 2022 @09:47AM (#30360614)

> Though I don't really recommend doing this since you should not be executing downloaded binaries often enough for this to be worth doing.

I literally do this multiple times per day. What in hell do you folk do with your computers?

Thanks for the script ! There's a few tens of thousands of files in my downloads folder, I hope this isn't going to pollute the inotify fds too much...

[ Parent | on HN ]

Re:How can you be fooled by the U+202E trick? (2013) by assbuttbuttass on Wednesday February 16, 2022 @09:56AM (#30360751)

I usually install programs through the distro package manager. Out of curiosity, what are you doing that requires downloading so many executables from the web?

[ Parent | on HN ]

Re:How can you be fooled by the U+202E trick? (2013) by pixl97 on Wednesday February 16, 2022 @10:48AM (#30361504)

>requires downloading so many executables from the web?

Hopefully not leaking company information to clever attackers.

I work with a number of clients in high security environments where you have to get permissions to perform operations like execution (or even setting chmod x on a file). It really does limit people running random things and causing destruction.

[ Parent | on HN ]

Re:How can you be fooled by the U+202E trick? (2013) by alpaca128 on Wednesday February 16, 2022 @11:24AM (#30361991)

When you seriously download and run multiple executables a day I wouldn't call that a common use-case. At least 99.9% of my downloaded files are not executables. Those are usually pulled via the package manager or git, so basically I only download an AppImage if both the repos and flatpak can't install it.

I have no idea in what situation I'd need to load so many executables via the browser.

[ Parent | on HN ]

Re:How can you be fooled by the U+202E trick? (2013) by jcelerier on Thursday February 17, 2022 @05:53AM (#30371749)

I mostly use appimages

[ Parent | on HN ]

Re:How can you be fooled by the U+202E trick? (2013) by marcosdumay on Wednesday February 16, 2022 @10:47AM (#30361491)

I can't remember the last time I had to do it. Not on the last 4 years for sure.

Executables tend to come compressed with a lot of other files nowadays, and compression software knows to set the executable bit when extracting them.

[ Parent | on HN ]