3 ms·

Yes, and it could "keylog" over remote connections as well.

• pama 5y ago
  Very few admins would switch from bash (possibly zsh), and bash has tons of eyes looking over its codebase. Terminals are interchangeable and could direct the shell in ways that can be invisible to the user.
  • tadfisher 5y ago
    All the security review in the world won't stop a vulnerability elsewhere from replacing `sudo` with an alias in your `.bash_profile`.
    • pama 5y ago
      Agreed. A malicious terminal could do all that and more. And it won’t have to edit your bashrc, though it certainly could.