4 ms·
Portability of shells/binary injection and the associated layers often come with extreme vulnerabilities that are often not officially discovered for years. Con
by suifbwish 5y ago
Portability of shells/binary injection and the associated layers often come with extreme vulnerabilities that are often not officially discovered for years. Convenience is often the reason many new vulnerabilities are introduced. Cool project for hobby purposes but be cautious when using this sort of thing on production systems especially on those housing data of any importance.
- hamburglar 5y agoAt my company this would be auto-flagged and you’d have the intrusions team on your ass inside of 5 minutes. :D
- vuln 5y ago“But I saw it on hackers news and installed via homebrew.” /s
- jclulow 5y agoIf they don't want you to fling binaries into your home directory they should just mount it noexec. At any rate it doesn't seem like a fantastic security/ability-to-work trade-off. Limit the privileges of the account or you're one exploit away from trouble.
- hamburglar 5y agoMany redundant layers are used to prevent and/or detect security violations, but “don’t install random binaries on prod machines” is a basic tenet. If you need certain tools to do your job, deploy them via proper controlled and audited mechanisms, not via scp.