research!rsc: The xz attack shell script

https://research.swtch.com/xz-script

More investigations on the xz bash attack script.

43 points · 5 comments · view on lemmy.world

5 Comments

towerful@programming.dev · 5 pts · 2y

Wow

hardkorebob@programming.dev · 3 pts · 2y (2 replies)

I learned so much from this! Its funny I have been working on shell stuff.

https://github.com/dislux-hapfyl/pynksh

greysemanticist@lemmy.one · 2 pts · 2y (1 reply)

Oh man, your demo gives me Hudsucker Proxy vibes ("You know, for kids!"). I'm going to have to watch it a couple of times to understand what pnk is doing here. My initial take is pnk is a DSL of bash functions that appear to be composing together Tkinter "primitives."

An "APL" for UI. Interesting stuff.

hardkorebob@programming.dev · 1 pts · 2y

Yes a DSL. And almost all of Python is hidden inside shell functions. I can make anything Python just writing in shell. I did make some high order functions for Tkinter so I can code faster and I used colors for quicker visual parsing and also removed worrying about indentation by classifying the function using capital letters and a tag for making the color block. Its simply me trying to write code more effectively. Abstracted away the boilerplate in a sense. Its dead simple really. I would love to tell you more.

simbico@lemmy.zip · 2 pts · 2y

Wow, this is some hardcore bash black magic.