this post was submitted on 06 Dec 2023
177 points (95.9% liked)

Technology

58902 readers
3627 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 34 points 10 months ago (2 children)

I'll answer because I found the information. It appears that the attacker would need to rely on physical access to the machine OR another exploit that lets them access the computer remotely.

[–] [email protected] 13 points 10 months ago (1 children)

So the best security is still keeping your computer behind a locked door and not clicking on suspicious stuff?

[–] [email protected] 9 points 10 months ago (1 children)

The best security is keeping it in box, removing the battery, and never turning it on. /j

[–] [email protected] 6 points 10 months ago (1 children)

Maybe I should hire an Amish guy as a consultant for IT. Those guys never get hacked.

[–] [email protected] 1 points 10 months ago

Beg to disagree. See: “Amish Mafia.”

[–] [email protected] 6 points 10 months ago* (last edited 10 months ago)

Or they could just get you to execute the command without your knowledge (eg: all the people who just blindly copy-paste commands, or pipe scripts from the net into sudo). Or it could be a compromised github account/repo (supply-chain attack). Or even the ol' techsupport scam where they get gullible users to install stuff...