2 ms·
That example classifier is horrendous. A simple substring search for ls/cat/echo/etc?
by LoganDark 5mo ago
That example classifier is horrendous. A simple substring search for ls/cat/echo/etc?
- anuramat 5mo agostill, far more effective than "NEVER FUCKING GUESS"
- Tyr42 5mo agoCan I do echo blah blah >> ~/.ssh/authorized_keys And that'd be auto approved?
- chrismarlow9 5mo agosurely concats of user input, stdout of external dependencies, and non-deterministic output feeding back directly to an eval is safe. it's never been a problem before. not even trying to check the boxes when it comes to security anymore.
- vgudur297 5mo ago[flagged]