Rustmilian@lemmy.world to Technology@lemmy.worldEnglish · 7 months agoCritical Rust flaw enables Windows command injection attackswww.bleepingcomputer.comexternal-linkmessage-square18fedilinkarrow-up1134arrow-down120cross-posted to: rust@programming.devpulse_of_truth@infosec.pubprogramming@programming.dev
arrow-up1114arrow-down1external-linkCritical Rust flaw enables Windows command injection attackswww.bleepingcomputer.comRustmilian@lemmy.world to Technology@lemmy.worldEnglish · 7 months agomessage-square18fedilinkcross-posted to: rust@programming.devpulse_of_truth@infosec.pubprogramming@programming.dev
minus-squarebaru@lemmy.worldlinkfedilinkEnglisharrow-up48·7 months agoThis isn’t Rust specific. It’s really difficult to securely start a command in Windows. I highly recommend to read https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/.
minus-squaresepulcher@lemmy.calinkfedilinkEnglisharrow-up7arrow-down4·7 months agoI’m honestly surprised windows can even exist at this point. It’s mind-boggling to me that people would dedicate their lives to learning that system when it’s such a shoddy piece of crap. It’s amazing what a motivator money can be.
This isn’t Rust specific. It’s really difficult to securely start a command in Windows. I highly recommend to read https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/.
I’m honestly surprised windows can even exist at this point.
It’s mind-boggling to me that people would dedicate their lives to learning that system when it’s such a shoddy piece of crap.
It’s amazing what a motivator money can be.