2 ms·
100% Agree. If I were an attacker, this is the easiest way to gain root access, leak env variables and install ransomware on the machine. Accepting this as th
by rvz 7mo ago
100% Agree.
If I were an attacker, this is the easiest way to gain root access, leak env variables and install ransomware on the machine.
Accepting this as the standard way to install software just for convenience over security is just pure ignorance until a massive breach happens.
This even before mentioning flawed standards such as INSTALL.md [0] for agents to curl | sudo bash unattended from a .md file.
[0] https://www.mintlify.com/blog/install-md-standard-for-llm-executable-installation https://www.mintlify.com/blog/install-md-standard-for-llm-ex...