Hacker News new | past | comments | ask | show | jobs | submit login

What's stopping a Bash script from doing something similar? You could alias ls to a malicious actor for example.



Well, aliases are ignored in scripts usually, but you could prepend something to the PATH so your script/exe gets found before built-ins, no? I agree, I don't see that this is a problem unique to Xonsh.


I mean, that's the underlying concept behind the fork bomb isn't it? With ":() { :|:&}" you're essentially redefining the bash noop to be a function that pipes/forks itself into itself recursively.

It's the reason './' is not in the default path as well (so you can't place an 'ls' in your home directory and have the admin run your command instead of the real ls).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: