Terminal2Shell is a design-level vulnerability in terminal emulators. When a terminal is launched, it immediately spawns a shell process and connects it directly to the user's keyboard. From there, the attacker can issue arbitrary commands with the full privileges of the logged-in user.

Researchers have confirmed that the shell will execute any command typed into it, including commands that delete files, install software, and modify system configuration. In some cases, the shell has been observed executing commands the user typed themselves.

cross-posted from: https://feditown.com/post/3792643

turnoff.us (credits)

Explanation: one of today's compromised root certificates had the number 4 as its private key.

That should be new Java slogan

cross-posted from: https://lemmy.zip/post/73641867

original XKCD#927: https://xkcd.com/927/

https://www.explainxkcd.com/wiki/index.php/927:_Standards

cross-posted from: https://programming.dev/post/58289586

Cross posted from: https://thelemmy.club/post/56974556