undefined | Better HN

0 pointsextraduder_ire1mo ago0 comments

That was the result of an additional space in the path passed to rm, IIRC.

Though rm /$TARGET where $TARGET is blank is a common enough footgun that --preserve-root exists and is default.

0 comments

Found it. is was this line [0] specifically. "rm -rf /usr /lib/nvidia-current/xorg/xorg" instead of "rm -rf /usr/lib/nvidia-current/xorg/xorg", which will delete all of /usr and then fail to delete a non-existent directory at /lib/nvidia-current/xorg/xorg

0: https://github.com/MrMEEE/bumblebee-Old-and-abbandoned/commi...

niyikiza1mo ago

You'd be surprised to see how often we're seeing those types of semantic attack vulnerabilities in Agent frameworks: https://niyikiza.com/posts/map-territory/

cyberax1mo ago

Even better, $TARGET might be "/home/user/documents and settings /bin"

extraduder_ireOP1mo ago

I believe that is what staticassertion was suggesting. / is a poor example because of --preserve-root being the default.

cyberax1mo ago

Not quite. The grandparent's example was missing quotes around $TARGET. Which is yet _another_ footgun.

Without quotes it becomes: `rm -Rf /home/user/documents and settings /bin`

j / k navigate · click thread line to collapse

0 pointsextraduder_ire1mo ago0 comments

That was the result of an additional space in the path passed to rm, IIRC.

Though rm /$TARGET where $TARGET is blank is a common enough footgun that --preserve-root exists and is default.

0 comments

extraduder_ireOP1mo ago

0: https://github.com/MrMEEE/bumblebee-Old-and-abbandoned/commi...

niyikiza1mo ago

You'd be surprised to see how often we're seeing those types of semantic attack vulnerabilities in Agent frameworks: https://niyikiza.com/posts/map-territory/

cyberax1mo ago

Even better, $TARGET might be "/home/user/documents and settings /bin"

extraduder_ireOP1mo ago

I believe that is what staticassertion was suggesting. / is a poor example because of --preserve-root being the default.

cyberax1mo ago

Not quite. The grandparent's example was missing quotes around $TARGET. Which is yet _another_ footgun.

Without quotes it becomes: `rm -Rf /home/user/documents and settings /bin`

j / k navigate · click thread line to collapse