4 ms·

This is satire, yes? The footer links to https://github.com/dirtycow/dirtycow.github.io https://github.com/dirtycow/dirtycow.github.io , which is a real vulnera

by 333c 9y ago

This is satire, yes? The footer links to https://github.com/dirtycow/dirtycow.github.io https://github.com/dirtycow/dirtycow.github.io , which is a real vulnerability. Further, this is the proof-of-concept from https://holeybeep.ninja/am_i_vulnerable.sh https://holeybeep.ninja/am_i_vulnerable.sh : #!/bin/sh # TODO: Backdoor this machine? modprobe pcspkr beep -l 1000 -r 3 -f 44000

333c 9y ago
Found the repo for this site: https://github.com/holeybeep/holeybeep https://github.com/holeybeep/holeybeep
seanwilson 9y ago
The website is tongue-in-cheek but the exploit patch is documented here: "Debian Security Advisory DSA-4163-1 beep -- security update" https://www.debian.org/security/2018/dsa-4163 https://www.debian.org/security/2018/dsa-4163
- 333c 9y ago
  Ah, cool. Thanks for the link! I was confused by the original post.
- avian 9y ago
  Apart from confirming the vulnerability, that page doesn't really give any technical info. Does anyone have any details on the problem? It's such a simple program that I'm fascinated by the fact that it has a security vulnerability. I was looking at the patch that Debian shipped and it seems to me that there was some kind of a race condition when opening the console device multiple times, but I can't figure out the exact source of the problem.
  - jwilk 9y ago
    https://news.ycombinator.com/item?id=16753013 https://news.ycombinator.com/item?id=16753013 has more discussion, but so far nobody has figured out what exactly is going on.
jzzskijj 9y ago
Hah, it is quite surreal what kind of scripts are asked to be curled and piped to a shell. And some users do eithout hesitation, because some website asked them to. Hopefully this pipe to sudo shell joke works as an eye opener to some.
- slimsag 9y ago
  As long as it is over HTTPS and you trust the author, it shouldn't be any different than downloading and running an arbitrary binary from a website.
  - jzzskijj 9y ago
    Sure. Trust. But shell script at least gives easy means to have a glimpse what is it going to do. As legitimate websites of software have been breached to serve infected packages (like CCleaner[1]) or otherwise fraudulent content (even kernel.org[2]), I always shudder a bit, when I see being asked to pipe something directly from curl to a (root) shell. 1. https://www.extremetech.com/internet/256238-ccleaner-infection-severe-thought-targeted-microsoft-google-samsung https://www.extremetech.com/internet/256238-ccleaner-infecti... 2. https://lwn.net/Articles/457142/ https://lwn.net/Articles/457142/
  - shakna 9y ago
    Apart from partial execution issues.

by 333c 9y ago

333c 9y ago

Found the repo for this site: https://github.com/holeybeep/holeybeep https://github.com/holeybeep/holeybeep

seanwilson 9y ago

The website is tongue-in-cheek but the exploit patch is documented here: "Debian Security Advisory DSA-4163-1 beep -- security update" https://www.debian.org/security/2018/dsa-4163 https://www.debian.org/security/2018/dsa-4163

333c 9y ago
Ah, cool. Thanks for the link! I was confused by the original post.
avian 9y ago
Apart from confirming the vulnerability, that page doesn't really give any technical info. Does anyone have any details on the problem? It's such a simple program that I'm fascinated by the fact that it has a security vulnerability. I was looking at the patch that Debian shipped and it seems to me that there was some kind of a race condition when opening the console device multiple times, but I can't figure out the exact source of the problem.
- jwilk 9y ago
  https://news.ycombinator.com/item?id=16753013 https://news.ycombinator.com/item?id=16753013 has more discussion, but so far nobody has figured out what exactly is going on.

jzzskijj 9y ago

Hah, it is quite surreal what kind of scripts are asked to be curled and piped to a shell. And some users do eithout hesitation, because some website asked them to. Hopefully this pipe to sudo shell joke works as an eye opener to some.

slimsag 9y ago
As long as it is over HTTPS and you trust the author, it shouldn't be any different than downloading and running an arbitrary binary from a website.
- jzzskijj 9y ago
  Sure. Trust. But shell script at least gives easy means to have a glimpse what is it going to do. As legitimate websites of software have been breached to serve infected packages (like CCleaner[1]) or otherwise fraudulent content (even kernel.org[2]), I always shudder a bit, when I see being asked to pipe something directly from curl to a (root) shell. 1. https://www.extremetech.com/internet/256238-ccleaner-infection-severe-thought-targeted-microsoft-google-samsung https://www.extremetech.com/internet/256238-ccleaner-infecti... 2. https://lwn.net/Articles/457142/ https://lwn.net/Articles/457142/
- shakna 9y ago
  Apart from partial execution issues.