Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
TheLoneWolfling
on June 17, 2015
|
parent
|
context
|
favorite
| on:
Boffins reveal password-killer 0days for iOS and O...
That's a major security bug waiting to happen. You're effectively granting everyone the right to create files in anyone's home directory.
logfromblammo
on June 18, 2015
[–]
But you have to be superuser to chown.
TheLoneWolfling
on June 18, 2015
|
parent
[–]
That's not the only way to get an arbitrary file owned by someone else.
logfromblammo
on June 18, 2015
|
root
|
parent
[–]
If there is a way that does not require superuser access at any point in the process, I'm curious. Please tell.
Consider applying for YC's Fall 2026 batch!
Applications
are open till July 27.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
