4 ms·
Select the text and right click to copy. The trick is over when the "search google for 'malicious text' comes up instead of the command in chrome.
by Achshar 14y ago
Select the text and right click to copy. The trick is over when the "search google for 'malicious text' comes up instead of the command in chrome.
- TheJH_ 14y agoRight... for a real attack, you'd have to hide the evil commands near the end of the normal-looking one (the string you see there is truncated). I thought about doing that, but it'd give you a few seconds to react in this example because you'd have the git command run first. Hmm, maybe it'd be doable using backticks or so? Those could be put at the end and would evaluate first anyway...