News for hackers. Stuff that matters.

A comment on Copy Fail – CVE-2026-31431. Parent comment

Re:Copy Fail – CVE-2026-31431 by oviet on Thursday April 30, 2026 @03:59AM (#47959572)
hmm have i missed anything?
[ Parent | on HN ]
Re:Copy Fail – CVE-2026-31431 by OvervCW on Thursday April 30, 2026 @05:11AM (#47960008)
Any program on your computer can just run "sudo" to escalate itself.
[ Parent | on HN ]
Re:Copy Fail – CVE-2026-31431 by hk__2 on Thursday April 30, 2026 @09:57AM (#47962591)
The problem is not the passwordless sudo but running untrusted programs on your computer under your user. They don’t need sudo to steal your SSH keys or inject malicious code in your .bashrc.
[ Parent | on HN ]