Comment by staticassertion 3 days ago
What if you wrote something more like:
# terrible code, never use ty
def cleanup(dir):
system("rm -rf {dir}")
def main():
work_dir = os.env["WORK_DIR"]
cleanup(work_dir)
At what point is it negligent?
That was the result of an additional space in the path passed to rm, IIRC.
Though rm /$TARGET where $TARGET is blank is a common enough footgun that --preserve-root exists and is default.
Found it. is was this line [0] specifically. "rm -rf /usr /lib/nvidia-current/xorg/xorg" instead of "rm -rf /usr/lib/nvidia-current/xorg/xorg", which will delete all of /usr and then fail to delete a non-existent directory at /lib/nvidia-current/xorg/xorg
0: https://github.com/MrMEEE/bumblebee-Old-and-abbandoned/commi...
You'd be surprised to see how often we're seeing those types of semantic attack vulnerabilities in Agent frameworks: https://niyikiza.com/posts/map-territory/
I believe that is what staticassertion was suggesting. / is a poor example because of --preserve-root being the default.
This is not hypothetical. Steam and Bumblebee did it.