3 ms·
Just a friendly reminder to everyone, don't copy and paste commands into the terminal. There could be invisible characters that can execute unwanted operations
by RandomBacon 7y ago
Just a friendly reminder to everyone, don't copy and paste commands into the terminal. There could be invisible characters that can execute unwanted operations.
Explanation/example: https://thejh.net/misc/website-terminal-copy-paste https://thejh.net/misc/website-terminal-copy-paste
Previous HN discussions: https://news.ycombinator.com/item?id=10554679 https://news.ycombinator.com/item?id=10554679 and https://news.ycombinator.com/item?id=5508225 https://news.ycombinator.com/item?id=5508225
- morsch 7y agoFWIW, that relies on hiding input via CSS, which -- outside of a separate exploit of HN's comment sanitiser -- is not an option in a HN comment.
- erinaceousjones 7y agofish shell gets around this nicely it appears; no commands are run until you explicitly hit enter (so you see the nefarious extra hidden commands before they're ran), even with the newline chars it seems to understand you're pasting a block