What if I put weird symbols in pkgbuild that make

My statement is "there might be an editor that might have a vulnerability that might be used to cause it to display text in a wrong way". There is no way for you to prove me wrong on this.

0

6 месяцев назад

D

Alexander Gnatyuk
My statement is "there might be an editor that mig...

So what?

0

6 месяцев назад

D

Alexander Gnatyuk
My statement is "there might be an editor that mig...

You have to read the scientist method first

0

6 месяцев назад

Muflone

Alexander Gnatyuk
You can't prove that something is inexistent. I'm ...

You're simply spreading fud with zero arguments about an inexistent bug still unknown

0

6 месяцев назад

Alexander Gnatyuk Автор вопроса

Muflone
You're simply spreading fud with zero arguments ab...

At no point have a I claimed that something like that exists. The only thing I claim is that it might.

0

6 месяцев назад

Muflone

Alexander Gnatyuk
At no point have a I claimed that something like t...

Ok, so this issue is inexistent

0

6 месяцев назад

Alexander Gnatyuk Автор вопроса

Muflone
Ok, so this issue is inexistent

You can't claim nonexistence of anything.

0

6 месяцев назад

Vim

I have to disagree here. It is true that most editors' vulnerabilities have to do with malformed input, where they can be crashed (i.e. denial of service), or in some cases achieve code execution. It is also true that technically, you could insert non-printable control characters in a text file, especially if you have a hex editor and an ASCII conversion chart handy. And I do encourage security research like this, especially fuzzing. If anything, developers should not consider any data provided by the user or third-party code trustworthy at all. However, and this is where I disagree.. if you break the text viewer / editor like this, chances are that you'll also break the AUR helper's code that interprets such a malformed file. There is still a syntax to it, and that has to be taken into account. Inserting non-printable control characters would not only be a giant red flag, it would also most likely not work.

0

6 месяцев назад

Raptor Blue Bear

Vim
I have to disagree here. It is true that most edit...

It's not something that can always be picked up easily.

0

6 месяцев назад

harꭑony5 (⊙ ◡ ⦿︎) ↺

Alexander Gnatyuk
My statement is "there might be an editor that mig...

Unicode attacks on source code have gained traction in recent years. For reference: https://en.m.wikipedia.org/wiki/Trojan_Source http://unicode.org/reports/tr55/ https://unicode.org/reports/tr39/

0

6 месяцев назад

Alexander Gnatyuk Автор вопроса

harꭑony5 (⊙ ◡ ⦿︎) ↺
Unicode attacks on source code have gained tractio...

Tell this to @il_muflone ._.

0

6 месяцев назад

Muflone · Accepted Answer

Muflone

If your editor won't show the code only because you use gibberish, change the code editor immediately

0

6 месяцев назад

Похожие чаты

What if I put weird symbols in pkgbuild that make

17 ответов

Похожие вопросы