News for hackers. Stuff that matters.

A comment on Don't Copy-Paste from Website to Terminal.

Re:Don't Copy-Paste from Website to Terminal by LogicX on Sunday April 07, 2013 @03:33PM (#5508345)
Pasted result is:

  git clone

  /dev/null; clear; echo -n "Hello ";whoami|tr -d '\n';echo -e '!\nThat was a bad idea. Don'"'"'t copy code from websites you don'"'"'t trust!

  Here'"'"'s the first line of your /etc/passwd: ';head -n1 /etc/passwd

  git clone git://git.kernel.org/pub/scm/utils/kup/kup.git
[ Parent | on HN ]
Re:Don't Copy-Paste from Website to Terminal by TheJH_ on Sunday April 07, 2013 @05:00PM (#5508739)
You might want to mark the newlines in that command... without those, the attack would be pretty boring.
[ Parent | on HN ]
Re:Don't Copy-Paste from Website to Terminal by LogicX on Sunday April 07, 2013 @05:22PM (#5508823)
fixed.
[ Parent | on HN ]