in reply to Re: Re: File::Find considered hard?
in thread File::Find considered hard?

Actually, Abigail-II was just stating that s/he is not ignorant. If anyone wants to know why such a hack will not work, they could set up such an environment themselves and do some testing. I'm wondering if you know the definition of the word 'ignorance', as your use of the term in relation to Abigail-II (in this specific situation) is not valid. Unless you can prove that Abigail-II is wrong of course.

Replies are listed 'Best First'.
Re: Re^3: File::Find considered hard?
by etcshadow (Priest) on Mar 15, 2004 at 06:18 UTC
    Well, I was actually making a *shudder* joke. No, something as simple as injecting /etc/shadow into someone's list of files is not exactly tantamount to a root vulnerability. (But you should fear if someone injects etcshadow into your code.)

    However, depending on what you were planning to do with that list of files, it might have been a Bad Thing to have /etc/shaddow injected into it... particularly if this script were being run as root.

    In case you haven't noticed... using find with -print (which is the defualt command for find) is one of my pet-peeves.

    Use -print0 or -exec.

    Use -print0 or -exec!

    Use -print0 or -exec!!!

    example code: 

    my @files;
{
  local $/="\0";
  chomp (@files = `find . -print0`);
}

    [download]

    How hard was that? Now you have shut me down. You are l33t, and I am suX0rz. 

    ------------
:Wq
Not an editor command: Wq

    [download]
[reply]
[d/l]
[select]

      (But you should fear if someone injects etcshadow into your code.)

      You talk about not getting your jokes. But anyway, why is that?

      Sören

[reply]

In Section Meditations