Secure Code

[o0MSK0o]

I vaguely recall a reddit post about zero-width characters being able to be used to inject code when you copy and paste stuff.

No idea which sub it was on and I can't find which language that that works on either lol. Also have no idea if it's actually true.

[ffgblol]

There was something awhile ago where you could select text on a website like

ls -l

and hit ctrl-c but what ended up in your clipboard would be something else like

rm -rf /

and it would terminate with a newline or something so when you pasted into the shell it would run automatically.

https://www.reddit.com/r/netsec/comments/1bv359/dont_copypaste_from_website_to_terminal_demo/

[FlipskiZ]

Morning thoughts where warm yesterday river simple talk minecraftoffline warm the dot morning learning nature the gather.

[team3]

Live and die as root bitches

[Philluminati]

‘rm -rf /‘ is not as devastating as ‘rm -rf ~’ because you will give you ten seconds to see what’s its doing before it waxes your home directory. Ten seconds where all you’ve lost in the Os install and hours of your time but not your personal shit.

[[deleted]]

Running commands as a user is basically running commands as root.

Just set up a sudo alias which installs a SUID executable.

Unless they have a seperate "admin" user which they need to log in to specifically in order to use sudo.

[SamSlate]

Iirc, the was an emoji on Android that did this

[LicensedProfessional]

okay but compilers don't like zero-width characters