2 ms·
You could be a better ambassador of our industry by explaining the misconception instead of being condescending. And we wonder why developers think we are just
by lawnchair_larry 13y ago
You could be a better ambassador of our industry by explaining the misconception instead of being condescending. And we wonder why developers think we are just arrogant jerks.
- dguido 13y agoYou're welcome to step in and explain, but I think it's pretty obvious why local vulnerabilities in non-setuid binaries aren't exactly "critical."
- betterunix 13y agohttps://xkcd.com/1200/ https://xkcd.com/1200/
- dguido 13y agoThat would only be accurate if you could trigger one of these bugs remotely.
- betterunix 13y ago...or if you can trick the user into opening a malicious file. An exploit in ls? Send them a zip, tarball, etc. with a maliciously named file.