3 ms·
You don't know if you're running any code at all. You double click on a .jpeg file, and suddenly a python script is running. There are many ways to trick system
by peterwwillis 8y ago
You don't know if you're running any code at all. You double click on a .jpeg file, and suddenly a python script is running. There are many ways to trick systems and users into running something when they didn't want to run anything, but binfmt_misc makes this easier for the attacker.
- Spivak 8y agoWe're talking about a very specific situation where the attacker has enough privilege to add an association but not enough privilege to just run the malicious program.
- chungy 8y agoDoesn't actually happen though. GUI file managers prompt whether you want to execute a script or display it in a text editor. If you're on the terminal and do ./vegas.jpeg though... it's your own fault :P
- beojan 8y agoGenerally the file managers on Linux use "magic" to determine file type rather than extensions, so even if it would run you should know it's really a Python script.