News for hackers. Stuff that matters.
Re:Never run ldd on unknown executables by cjbprime on Sunday July 23, 2023 @09:13PM (#36841861)
This ("so many ways to exploit modern systems") is not actually true.

Yes, plenty of memory-unsafety vulnerabilities exist, but modern mitigations like stack cookies, ASLR, (and sometimes) sandboxing and PAC make it unlikely that e.g. a buffer overflow is exploitable without other factors such as an information leak from your machine back to the attacker. (This might be the case on publicly-accessible servers, but probably not on your laptop.)

The vulnerability being discussed here is unusually dangerous because it's more like command injection, and mitigations aren't going to help.

Re:Never run ldd on unknown executables by throwawaaarrgh on Monday July 24, 2023 @09:37AM (#36847789)
ASLR, PAC, etc are trivial to defeat for an experienced black hat / red team.

I'm not even talking about memory safety. That's just one class of exploits. There are so many more to choose from.

This vuln isn't that dangerous. It requires a special circumstance and trust. Other vulns don't require those things.