Okay. I briefly ate the onion, on this one. It tastes like sysadmin tears.

Just tried it out. It is real. And really simple to do.

Scary stuff. Tossing my machines in the bin tomorrow.

I work at google just shut off every server to protect us. 👍

Nobody show this to my boss please, they'll be asking me why I haven't fixed it yet

Getting a shell is bad, but what makes this worse is the insecurity of popular Linux tools that can be used for privilege escalation.

The sudo program has had a known vulnerability since its inception. The developers are incompetent. In some configurations, all you need is the user's password and you can execute arbitrary code as root. Sometimes, no password is needed at all.

Phew! Just got done patching all my servers. The main IOCs are

• C:\Windows\System32\cmd.exe
• /bin/bash
• /bin/sh

I just tested this exploit, I was easily able to remove the french language pack by typing "rm -fr /*"

Given simple primitives and runtime permissions, a skilled hacker can even bootstrap one of these “shells” from scratch, underlining the continued importance of banning math and computer science education in our schools.

Gotta minimize your attack surface sudo apt remove konsole for any Debian kde based distros

Switch off computer is the best mitigation

Removing keyboard and locking operator out of building is the next best thing.

This one goes to 11

Holy shit, my computer is infected. I opened my terminal and typed "sudo ls -halR /" and it showed me every file on my computer. Oh my god.

Oh, I heard of this one! Basically every single accidental corruption of any kind in any compny's production environment was made possible by this exploit! Scary stuff!

I still find it funny that in the distant past an engineer thought pasted commands should have some ~~ characters added, so the user has to delete them & think about their actions while pressing their arrow or various faster ctrl+ keys ..

Only tangentially related, but this reminds me of an interaction I had here on Lemmy. I was talking about my pure bash, brain-made CLI app that pushes files between Google Compute head nodes and Google Storage buckets, but does some additional fuckery with bash strings to serve as a crude git. Basically, the app manipulates a string that represents a bucket, and then uses the appropriate gcloud command with that string.

Someone was extremely concerned about the security of my app, how I should do an AI code review, and that only good programmers use all the tools available to them. I told them that I only want my code to be reviewed by humans. They said it was wild that someone would decline a security review. I told them that if there's a security issue with my app, they'll have to take it up with Google.

You should really place a /j somewhere before someone thinks they're screwed

Finally I'm justified in doing everything via a GUI.

Microsoft Paint: Not affected. Thank God.

• 1989 Bash released. Name confirms the attack is intentional.

Must’ve been another AI found exploit because no human could piece this together

I'm tired boss

I rarely comment on Lemmy but you actually made me laugh for 5 minutes straight 👏

Finally, I’m a real hacker.

I use Konsole on my Mac. It's not listed on there, so am I safe?

Fortunately Windows is at least protected from gaining elevated privileges since it still has to go through UAC. I hope nobody discovers some vulnerability called something like "desktop2shell".

The article says it's a one click exploit, but I'm finding I need to make two quick clicks to enter into the program. Can someone help me?? Am I doing something wrong?

I've spent all day trying to update my software to get this to work!!!

If he says he's there to upgrade the computers, don't let him in.

slop :)

I see what you did there and I admire the subtlety.