What if I put weird symbols in pkgbuild that make

My statement is "there might be an editor that might have a vulnerability that might be used to cause it to display text in a wrong way". There is no way for you to prove me wrong on this.

0

08.10.2023

D

Alexander Gnatyuk
My statement is "there might be an editor that mig...

So what?

0

08.10.2023

D

Alexander Gnatyuk
My statement is "there might be an editor that mig...

You have to read the scientist method first

0

08.10.2023

Muflone

Alexander Gnatyuk
You can't prove that something is inexistent. I'm ...

You're simply spreading fud with zero arguments about an inexistent bug still unknown

0

08.10.2023

Alexander Gnatyuk Автор вопроса

Muflone
You're simply spreading fud with zero arguments ab...

At no point have a I claimed that something like that exists. The only thing I claim is that it might.

0

08.10.2023

Muflone

Alexander Gnatyuk
At no point have a I claimed that something like t...

Ok, so this issue is inexistent

0

08.10.2023

Alexander Gnatyuk Автор вопроса

Muflone
Ok, so this issue is inexistent

You can't claim nonexistence of anything.

0

08.10.2023

Vim

I have to disagree here. It is true that most editors' vulnerabilities have to do with malformed input, where they can be crashed (i.e. denial of service), or in some cases achieve code execution. It is also true that technically, you could insert non-printable control characters in a text file, especially if you have a hex editor and an ASCII conversion chart handy. And I do encourage security research like this, especially fuzzing. If anything, developers should not consider any data provided by the user or third-party code trustworthy at all. However, and this is where I disagree.. if you break the text viewer / editor like this, chances are that you'll also break the AUR helper's code that interprets such a malformed file. There is still a syntax to it, and that has to be taken into account. Inserting non-printable control characters would not only be a giant red flag, it would also most likely not work.

0

08.10.2023

Raptor Blue Bear

Vim
I have to disagree here. It is true that most edit...

It's not something that can always be picked up easily.

0

08.10.2023

Bread pup ▲⬤ ×▫︎

Alexander Gnatyuk
My statement is "there might be an editor that mig...

Unicode attacks on source code have gained traction in recent years. For reference: https://en.m.wikipedia.org/wiki/Trojan_Source http://unicode.org/reports/tr55/ https://unicode.org/reports/tr39/

0

08.10.2023

Alexander Gnatyuk Автор вопроса

Bread pup ▲⬤ ×▫︎
Unicode attacks on source code have gained tractio...

Tell this to @il_muflone ._.

0

08.10.2023

Muflone · Accepted Answer

Muflone

If your editor won't show the code only because you use gibberish, change the code editor immediately

0

08.10.2023

Похожие чаты

What if I put weird symbols in pkgbuild that make

17 ответов

Похожие вопросы