Sujet : Re: gemini support for lynx
De : jmccue (at) *nospam* fuzzball.jmcunx.com (John McCue)
Groupes : comp.infosystems.geminiDate : 17. Apr 2024, 16:24:55
Autres entêtes
Organisation : A noiseless patient Spider
Message-ID : <uvopk6$1lrul$1@dont-email.me>
References : 1 2 3 4 5
User-Agent : tin/2.6.2-20221225 ("Pittyvaich") (OpenBSD/7.5 (amd64))
yeti <
yeti@tilde.institute> wrote:
oldernow <oldernow@dev.null> writes:
NOTE: the following is a poor attempt at humor To everyone
but no one in particular in this thread:
>
Sheesus... just pipe "gemget" output to "less", and be
done with.... ;-)
Less?
Pure bloat!
Your terminal's scrollback is all you need.
.-----------------------------------------------.
| $ printf 'gemini://geminiprotocol.net/\r\n' \ |
| > | ncat --ssl geminiprotocol.net 1965 |
| ... |
'-----------------------------------------------'
May not be a bad idea :)
See:
https://www.cve.org/CVERecord?id=CVE-2024-32487 less through 653 allows OS command execution via a
newline character ... Exploitation also requires the
LESSOPEN
Why less on Linux has this issue is very curious. This is
on top if the xz backdoor.
-- [t]csh(1) - "An elegant shell, for a more... civilized age." - Paraphrasing Star Wars