On: I hacked an office telephone to play Doom

[flatiron]

Yep. I had no idea sourced scripts don’t need execute. Once they were pushing files up there I snarked to myself “psshhhh good luck running them!”

[tomc1985 → flatiron]

If he could get to a bash prompt or get exec() access he could run scripts without +x too...

exec('bash path/to/supposedly/unexecutable/script.sh')

[robertlagrant → flatiron]

Yeah - is this a security issue?

[flatiron → robertlagrant]

Considering that’s what they used for bringing up dropbear. I would think yes!