2026-11-09 20:09 UTC
Replies (32)
-
@hanke@feddit.nu 2026-11-09 20:44
Just tried it out. It is real. And really simple to do. Scary stuff. Tossing my machines in the bin tomorrow.
-
@feddylemmy@lemmy.world 2026-11-09 20:46
Phew! Just got done patching all my servers. The main IOCs are C:\Windows\System32\cmd.exe /bin/bash /bin/sh
-
@epyon22@sh.itjust.works 2026-11-09 20:48
Gotta minimize your attack surface sudo apt remove konsole for any Debian kde based distros
-
@mumblerfish@lemmy.world 2026-11-09 20:54
Oh, I heard of this one! Basically every single accidental corruption of any kind in any compny’s production environment was made possible by this exploit! Scary stuff!
-
@dgdft@lemmy.world 2026-11-09 21:00
Given simple primitives and runtime permissions, a skilled hacker can even bootstrap one of these “shells” from scratch, underlining the continued importance of banning math and computer science education in our schools.
-
@ns1@feddit.uk 2026-11-09 21:04
Nobody show this to my boss please, they’ll be asking me why I haven’t fixed it yet
-
@MajorHavoc@programming.dev 2026-11-09 21:09
Okay. I briefly ate the onion, on this one. It tastes like sysadmin tears.
-
@rtxn@lemmy.world 2026-11-09 21:20
Fortunately Windows is at least protected from gaining elevated privileges since it still has to go through UAC.
-
@wuffah@lemmy.world 2026-11-09 21:22
Finally, I’m a real hacker.
-
@Buage_@piefed.social 2026-11-09 21:24
I rarely comment on Lemmy but you actually made me laugh for 5 minutes straight 👏
-
@ImgurRefugee114@reddthat.com 2026-11-09 21:29
The sudo program has had a known vulnerability since its inception. Its developers are incompetent. Under some configurations, all you need is the user’s password and you’re given root. Sometimes, no password is needed at all.
-
@Agent641@lemmy.world 2026-11-09 21:30
This one goes to 11
-
@CoconutLove@lemmy.today 2026-11-09 21:37
Must’ve been another AI found exploit because no human could piece this together
-
@djdarren@piefed.social 2026-11-09 21:58
I use Konsole on my Mac. It’s not listed on there, so am I safe?
-
@jqubed@lemmy.world 2026-11-09 22:33
1989 Bash released. Name confirms the attack is intentional.
-
@DarkCloud@lemmy.world 2026-11-09 22:42
The article says it’s a one click exploit, but I’m finding I need to make two quick clicks to enter into the program. Can someone help me?? Am I doing something wrong? I’ve spent all day trying to update my software to get this to work!!!
-
@FaceDeer@fedia.io 2026-11-09 22:45
Finally I'm justified in doing everything via a GUI.
-
@rockSlayer@lemmy.blahaj.zone 2026-11-09 22:47
Only tangentially related, but this reminds me of an interaction I had here on Lemmy. I was talking about my pure bash, brain-made CLI app that pushes files between Google Compute head nodes and Google Storage buckets, but does some additional fuckery with bash strings to serve as a crude git. Basically, the app manipulates a string that represents a bucket, and then uses the appropriate gcloud command with that string. Someone was extremely concerned about the security of my app, how I should do an AI code review, and that only good programmers use all the tools available to them. I told them that I only want my code to be reviewed by humans. They said it was wild that someone would decline a security review. I told them that if there’s a security issue with my app, they’ll have to take it up with Google.
-
@micgerne@lemmy.dbzer0.com 2026-11-09 23:25
I just tested this exploit, I was easily able to remove the french language pack by typing “rm -fr /*”
-
@SapphironZA@sh.itjust.works 2026-11-09 23:38
Switch off computer is the best mitigation Removing keyboard and locking operator out of building is the next best thing.
-
@DrunkAnRoot@sh.itjust.works 2026-11-10 00:08
I work at google just shut off every server to protect us. 👍
-
@scops@reddthat.com 2026-11-10 01:54
Microsoft Paint: Not affected. Thank God.
-
@doomsdayrs@lemmy.ml 2026-11-10 03:47
I’m tired boss
-
@stembolts@programming.dev 2026-11-10 04:12
Holy shit, my computer is infected. I opened my terminal and typed “sudo ls -halR /” and it showed me every file on my computer. Oh my god.
-
@Allero@lemmy.today 2026-11-10 06:49
You should really place a /j somewhere before someone thinks they’re screwed
-
@DarkCloud@lemmy.world 2026-11-10 07:14
If he says he’s there to upgrade the computers, don’t let him in.
-
@anas@lemmy.world 2026-11-10 08:03
slop :)
-
@Sina@beehaw.org 2026-11-10 08:50
I still find it funny that in the distant past an engineer thought pasted commands should have some ~~ characters added, so the user has to delete them & think about their actions while pressing their arrow or various faster ctrl+ keys …
-
@LovableSidekick@lemmy.world 2026-11-10 21:03
I see what you did there and I admire the subtlety.
-
@NovaVeles@lemmy.world 2026-11-11 00:31
Oh crap even my Atari 400 is done for! Yes, I mail in my responses here.
-
@Superorbit@lemmy.ca 2026-11-11 16:44
You got me good for a couple seconds there lmao
-
@some_guy@lemmy.sdf.org 2026-11-11 17:40
If you’re smart, like me, you’ll unplug your devices immediately. Failure to do so ensures your doom.