top | item 26927400

(no title)

rsa25519 | 4 years ago

> This issues goes way back: imagine if after executing a program on CLI instead of closing it gave you a fake shell, where you eventually went about your day until you had to type your password into sudo..

As a fun fact, even worse might be a program maliciously aliasing sudo in ~/.profile

discuss

order

spicybright|4 years ago

That's a spooky one, although I've never heard of that happening in practice before.

But then again how, how someone know if that happened!

moistbar|4 years ago

They'd have to know to look for it, but running `alias sudo` would show if it had an alias assigned to it. It would honestly be more effective to change $PATH to include the malicious version of sudo.