News for hackers. Stuff that matters.

A comment on Abusing url handling in iTerm2 and Hyper for code execution. Parent comment

Re:Abusing url handling in iTerm2 and Hyper for code execution by Timber-6539 on Tuesday May 21, 2024 @11:49PM (#40437124)
Docker is at least sandboxed by default and requires sudo password to run commands.
[ Parent | on HN ]
Re:Abusing url handling in iTerm2 and Hyper for code execution by freeone3000 on Wednesday May 22, 2024 @08:43AM (#40440253)
But it requires sudo or effective-sudo to run any command, making such a measure worthless
[ Parent | on HN ]
Re:Abusing url handling in iTerm2 and Hyper for code execution by dv_dt on Wednesday May 22, 2024 @01:32PM (#40443668)
There are advantages to docker, but also disadvantages. Definitely the same w/ "curl | sh" That's all I was trying to allude to, tongue in cheek.
[ Parent | on HN ]