Linked by Thom Holwerda on Tue 13th Jun 2006 12:11 UTC, submitted by John McWell
Thread beginning with comment 133293
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.




Member since:
2006-02-15
Running a script file on *nix could erase, at worst, your home directory
Unless you're in the sudoer's list on a system with the no-password-required version of sudo,
or you're in a group that has read/write access to sensitive data on the system that's not in your home directory, like, say, a database,
or naively set up root with no password,
or have xhost access to someone's box,
or set up ssh credentials to allow password free log in to sensitive accounts from your account,
or, by dumb luck, happen to be on a system with a privilige escalation exploit possibility.
and it can be argued that the sort of denial-of-service attack such a script could mount might be more harmful than the loss of a user's data.
As someone who spent days cleaning up vaxen/unix boxes after the original internet worm attack, I'm not a big believer in the myth that <your favorite OS> is more secure than <the OS you hate most>.