4 ms·
Not at all a safe assumption. Most importantly, it's not that uncommon for even less experienced Mac users to copy and paste Terminal commands to solve one prob
by Steuard 13y ago
Not at all a safe assumption. Most importantly, it's not that uncommon for even less experienced Mac users to copy and paste Terminal commands to solve one problem or another. A lot of those "Just type this!" solutions I've seen involve sudo somewhere.
But on top of that, maybe I don't understand your meaning here, but do you do a security audit on every line of every script that you ever run? Especially scripts that you run without sudo? I know that I don't.
- mirkules 13y ago"A lot of those "Just type this!" solutions I've seen involve sudo somewhere." Not sure if you're alluding to this trick: http://thejh.net/misc/website-terminal-copy-paste http://thejh.net/misc/website-terminal-copy-paste This particular exploit could be rather nasty when used in conjunction with the above.
- chc 13y agoNot even that. Lots of Mac help sites will include snippets of Bash code for the user to enter (say, something using rm to delete files the Finder is having trouble statting), and people will just enter those. You don't even need to do anything sneaky with the copy/paste process. Just offer some malicious code and expect the user to run it blindly since they wouldn't be coming to MacNoobHelp.com if they were capable of vetting for exploits.
- ams6110 13y agoParticularly installer scripts that are run by the trendy technique of curl -L http://www.example.com/some/cool/thing/install.sh | bash Particularly risky if the protocol is not https. Even worse when the right-hand command is "sudo bash"