Hacker News new | ask | show | jobs
by rsa25519 1887 days ago
> This issues goes way back: imagine if after executing a program on CLI instead of closing it gave you a fake shell, where you eventually went about your day until you had to type your password into sudo..

As a fun fact, even worse might be a program maliciously aliasing sudo in ~/.profile
1 comments
spicybright 1887 days ago
That's a spooky one, although I've never heard of that happening in practice before.

But then again how, how someone know if that happened!

link
moistbar 1887 days ago
They'd have to know to look for it, but running `alias sudo` would show if it had an alias assigned to it. It would honestly be more effective to change $PATH to include the malicious version of sudo.
link