Re:iTerm2 critical security release
by godelski on Friday January 03, 2025 @02:47AM
(#42583525)
> Safely writing to /tmp/ was solved in 1986
If you RTFA you'll read (under "What is the issue?")
> This file, /tmp/framer.txt, may be readable by other users on the remote host.
This is EXACTLY a non-safe writing to /tmp
Yes, there are safe ways to write to /tmp, as described in the systemd link I provided, but no, it is not safe to naively write to /tmp. Same issue as the "Many Perils of /tmp" link I provided.
A solution that no one uses is not a solution.
If you're gonna be arrogant, you better also be right.
Yes, there are safe ways to write to /tmp, as described in the systemd link I provided, but no, it is not safe to naively write to /tmp. Same issue as the "Many Perils of /tmp" link I provided.
A solution that no one uses is not a solution.
If you're gonna be arrogant, you better also be right.