478
Terminal2Shell: Critical flaw grants instant shell access on every major OS (terminal2shell.com)
submitted 14 hours ago by to c/programmer_humor@programming.dev
68 comments fedilink hide all child comments
❤ 3
you are viewing a single comment's thread
view the rest of the comments
[–] 16 points 13 hours ago (9 children)

Gotta minimize your attack surface sudo apt remove konsole for any Debian kde based distros

  • permalink
  • fedilink
  • source
  • hideshow 9 child comments
    •
  • [–] 35 points 13 hours ago (8 children)

    sudo apt remove apt sudo

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 10 points 13 hours ago* (6 children)

    While the palindromic structure of that command is pleasing to mine eye, LMDE basically called me a frickin' idiot for trying.

    I know it always asks Continue [Y/n] and there's no yes | or echo | to force that, so I was reasonably sure I'd get away with it, but I don't think I could argue with the sentiment had it actually said that.

    (Also, I have Timeshift, so that would have saved my bacon but for the inconvenience of having to go through a rollback.)

    Anyway, here's what it said (scrolling may be required to see the last line which is clearly code for "you're an idiot"):

    REMOVING:                       
  apt       apt-utils          mint-meta-cinnamon  mintsources  mintupdate       sudo
  apt-file  command-not-found  mint-meta-core      mintsystem   python3-repolib

WARNING: The following essential packages will be removed.
This should NOT be done unless you know exactly what you are doing!
  apt

Summary:
  Upgrading: 0, Installing: 0, Removing: 12, Not Upgrading: 1
  Freed space: 52.3 MB

Error: Removing essential system-critical packages is not permitted. This might break the system.
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 7 points 12 hours ago (5 children)

    Honestly, I want to be allowed to break my system. I own it, it should do exactly what I say, warnings are fine, but software deciding it knows better than you is how we have reached the inescapable technogulag of the now.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 4 points 5 hours ago (1 child)

    You can, if you create an empty file at /etc/apt/break-my-system first. It's intentionally not mentioned to prevent another Linus situation

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 4 points 12 hours ago (1 child)

    In my experience, Linux only allows you to do 1 incredibly stupid thing at a time. Remove sudo? Cool. Remove apt? You betcha. Remove apt AND sudo? You're fucking nuts, I ain't doing that

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •