alt Hacker Newscurl is only the sandbox if you don't then do anything with the byte stream.
Pipe it to bash? game over
Pipe it to less/more? Better hope your distro keeps those patched
Open the file in a browser or PDF reader? Hey, look at all this shiny new attack surface!
Replies
inigyou • yesterday at 4:09 PM
Well yeah, that's true for any sandbox. If you pipe stuff outside of the sandbox, outside of any sandbox, and run it there, then you're not running it in a sandbox.
➕ show 1 reply
layer8 • yesterday at 2:24 PM
How do you set up the sandbox without having downloaded anything from the internet? I guess there’s still places where you can buy Linux CDs.
curl is not anti-virus.