I still find it funny that in the distant past an engineer thought pasted commands should have some ~~ characters added, so the user has to delete them & think about their actions while pressing their arrow or various faster ctrl+ keys …
You should really place a /j somewhere before someone thinks they’re screwed
The community it’s posted in is a bit of a giveaway, isn’t it?
Holy shit, my computer is infected. I opened my terminal and typed “sudo ls -halR /” and it showed me every file on my computer. Oh my god.
Microsoft Paint: Not affected. Thank God.
Unless you have allowed the AI features to install
I just tested this exploit, I was easily able to remove the french language pack by typing “rm -fr /*”
Don’t forget the —no-preserve-root flag or you’ll get an index out of bounds when deleting the recipe for five-root-puree
This flag is fortunately not needed as /* ensures root recipes are preserved. It’s just that anything below isn’t.
I work at google just shut off every server to protect us. 👍
I took the “us” in your statement to be “humanity” and it sparked an unexpected feeling of hope.
Okay. I briefly ate the onion, on this one. It tastes like sysadmin tears.
I was fooled until I saw the CVSS score of 11 on a scale of 0 to 10.
I had a msg to my team drafted before I realized I was a fucking idiot.
in my defense, my team is always trying to be mr. achiever and drop the latest vulnerability. I got a glimpse of this one and got excited since I hadn’t heard of this “new named threat”. when I tried reading further to prepare my draft… the reach and exposure of this vulnerability became clear.
also, to mitigate this, we’d have to hotpatch layer 8.
Duct tape works a treat for that!
Getting a shell is bad, but what makes this worse is the insecurity of popular Linux tools that can be used for privilege escalation.
The
sudoprogram has had a known vulnerability since its inception. The developers are incompetent. In some configurations, all you need is the user’s password and you can execute arbitrary code as root. Sometimes, no password is needed at all.That’s why there’s no
sudoon my system, onlydoas.sudo is so broken, automatic privilege cloning of any user
Just tried it out. It is real. And really simple to do.
Scary stuff. Tossing my machines in the bin tomorrow.
I’m not taking any chances. I’ve already tossed
bashinto the/bin/
Switch off computer is the best mitigation
Removing keyboard and locking operator out of building is the next best thing.
Nobody show this to my boss please, they’ll be asking me why I haven’t fixed it yet
Only tangentially related, but this reminds me of an interaction I had here on Lemmy. I was talking about my pure bash, brain-made CLI app that pushes files between Google Compute head nodes and Google Storage buckets, but does some additional fuckery with bash strings to serve as a crude git. Basically, the app manipulates a string that represents a bucket, and then uses the appropriate gcloud command with that string.
Someone was extremely concerned about the security of my app, how I should do an AI code review, and that only good programmers use all the tools available to them. I told them that I only want my code to be reviewed by humans. They said it was wild that someone would decline a security review. I told them that if there’s a security issue with my app, they’ll have to take it up with Google.
Gotta minimize your attack surface sudo apt remove konsole for any Debian kde based distros
Finally I’m justified in doing everything via a GUI.
Must’ve been another AI found exploit because no human could piece this together
Thank goodness for frontier models.
