4 ms·
It also introduces potentially significant new attack surface.
by TimTheTinker 10y ago
It also introduces potentially significant new attack surface.
- flukus 10y agoDoes it expose any network service by default?
- laumars 10y agoNo more so than any of the shells that's already available on Windows (batch scripts, WSH, Powershell). If one was to exploit scripting on Windows, it would make more sense to target the existing shells rather than Bash as they're more widespread on Windows. Plus Bash on Windows isn't a new thing: we already have Cygwin, MinGW and I believe there was also some native Windows PE ports too. This is just a better implementation than the aforementioned three.
- dspillett 10y agoAny more so than, say, using bash and friends via cygwin or similar?
- criddell 10y agoMaybe. Cygwin is old code and sometimes that's better than new code from a security point of view.
- dragonwriter 10y agoYes, insofar as anything that allows you to do anything with your computer expands the attack surface. Like nearly everything, it's a context-dependent cost-benefit consideration.