Terminal2Shell is a design-level vulnerability in terminal emulators. When a terminal is launched, it immediately spawns a shell process and connects it directly to the user's keyboard. From there, the attacker can issue arbitrary commands with the full privileges of the logged-in user. Researchers have confirmed that the shell will execute any command typed into it, including commands that delete files, install software, and modify system configuration. In some cases, the shell has been observed executing commands the user typed themselves.

Product Vector Status

macOS Terminal.app, iTerm2, Ghostty, Warp VULNERABLE

Linux gnome-terminal, Konsole, xterm, Ctrl+Alt+F2 VULNERABLE

Windows cmd.exe, PowerShell, Windows Terminal, WSL VULNERABLE

FreeBSD / OpenBSD Literally the default experience VULNERABLE

DEC VT100 (1978) Physical serial cable VULNERABLE

Your router SSH, telnet, the little console port on the back VULNERABLE

VS Code Ctrl+` (one keystroke!) VULNERABLE

Microsoft Paint None known Not affected

turnoff.us (credits)

That should be new Java slogan

cross-posted from: https://lemmy.zip/post/73641867

original XKCD#927: https://xkcd.com/927/

https://www.explainxkcd.com/wiki/index.php/927:_Standards

Cross posted from: https://thelemmy.club/post/56974556

Trying to figure out how to best add text to an SVG, I thought maybe it doesn't show up because it's black-on-black, so I gave it stroke="white" before realizing I need to zoom out. Well, and stroke means the outline in SVG, so on the white background, it just makes the font look really thin.

This is the whole code:

<svg viewBox="0 -5 40 10" xmlns="http://www.w3.org/2000/svg">
  <text stroke="white">hello</text>
  <circle id="myCircle" cx="5" cy="5" r="4" />
  <use href="#myCircle" x="10" fill="blue" />
  <use href="#myCircle" x="20" fill="white" stroke="red" />
</svg>

And most of that is just this MDN example: https://developer.mozilla.org/en-US/docs/Web/SVG/Reference/Element/use#example

It does use my default font, which is Fira Sans. Will look different on other systems.