Hacker News new | past | comments | ask | show | jobs | submit login

can someone post the following to a channel and delete everybody's home directory that reads it with usuc?

   : rm -rf ~/
[edit]

They cannot. On careful rereading usuc passes the data through the pipe when writing a message, not reading it. So the channel is just full of raw terminal escape codes, if I understand correctly.




This is correct, the command is run by the user writing the message. Only the output lies in the channel.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: