points by Geezus_42 1 day ago | 0 comments
There's a million reasons why you shouldn't "cat untrusted READMEs".
[–] hnlmorg 1 day ago
[–] Geezus_42 20 hours ago
I don't see how that resolves the arbitrary code execution problem.
[–] hnlmorg 13 hours ago
It vastly reduces what’s possible via social engineering exploits. And in memory safe languages, reduces the scope of what a parser bug might have access to.
I know you’re trying to disagree with me, but you’re ostensibly raising the same core concerns that I am. :)
So far I can only think of 1: term vulnerabilities due to ANSI escape sequence parser bugs. And that’s exactly the reason I’m suggesting OSC8 should be off by default.