#純靠北工程師460
----------
原本以為rm -rf *只會在梗圖出現,沒想到就發生在我隔壁部門。有人不知怎麼搞的用了這個指令,系統直接死去,code也沒了(版本落後遠端備份),然後聽說沒幾天就要release..
----------
🗳️ [群眾審核] https://kaobei.engineer/cards/review
👉 [GitHub Repo] https://github.com/init-engineer/init.engineer
📢 [匿名發文] https://kaobei.engineer/cards/create
🥙 [全平台留言] https://kaobei.engineer/cards/show/5400
同時也有94部Youtube影片,追蹤數超過11萬的網紅Lukas Engström,也在其Youtube影片中提到,The first 1,000 people to use this link will get a 1 month free trial of Skillshare: https://skl.sh/lukasengstrm09211 Do you want to see MORE videos ...
「rm rf」的推薦目錄:
- 關於rm rf 在 純靠北工程師 Facebook 的最讚貼文
- 關於rm rf 在 宝儿 Facebook 的最讚貼文
- 關於rm rf 在 โปรแกรมเมอร์ไทย Thai programmer Facebook 的精選貼文
- 關於rm rf 在 Lukas Engström Youtube 的最佳貼文
- 關於rm rf 在 Lukas Engström Youtube 的精選貼文
- 關於rm rf 在 Lukas Engström Youtube 的精選貼文
- 關於rm rf 在 What does [rm -rf /] do? - Stack Overflow 的評價
- 關於rm rf 在 Sudo rm -rf: Efficient Networks for Universal Sound Source ... 的評價
- 關於rm rf 在 Is `yes | rm -r` safer than `rm -rf`? - Unix & Linux Stack Exchange 的評價
- 關於rm rf 在 [問卦] 下rm -rf指令時心情有多好? - Gossiping 的評價
rm rf 在 宝儿 Facebook 的最讚貼文
“Drink Party , Think SOTIPSY”.
生活的仪式感,少不了一杯热情🍸
Enter my Promo-code[sotipsy.com/rf/mKVrG ] to get RM 10 discount.
#sotipsy_my #SOTIPSY
@sotipsy_my
rm rf 在 โปรแกรมเมอร์ไทย Thai programmer Facebook 的精選貼文
👨🏫 ในรูปได้ยกตัวอย่าง ช่องโหว่ของการเขียนโปรแกรม
ที่เปิดโอกาสให้ผู้ประสงค์ร้ายสามารถโจมตีด้วยวิธี
Command Injection
.
ช่องโหว่นี้เกิดจากในหลายๆ ภาษาโปรแกรมมิ่ง
ได้อนุญาติให้เรียกคำสั่งของระบบปฏิบัติการได้โดยตรง
ซึ่งสุ่มเสี่ยงให้ผู้โจมตีฉวยโอกาสนี้ฉีดคำสั่งเข้าไปในโค้ด
ด้วยการต่อท้ายด้วยข้อความ &&
จึงทำให้แทรกคำสั่งอันตรายเข้าไปได้ เช่น
:
del /F * บน window
หรือ rm -rf * บน linux
:
ในรูปได้ยกตัวอย่างโค้ดภาษา Java
ซึ่งทำงานบน Window
จะเห็นว่าสามารถใช้ && แล้วต่อท้ายด้วยคำสั่งอะไรก็ได้
เช่น && tasklist && dir เป็นต้น
.
แล้วถ้าโปรแกรมมันรันใน linux/Unix
ก็สามารถต่อคำสั่งเป็นลูกโซ่ด้วยข้อความ && หรือ ; ก็ได้
:
และไม่ใช่ Java ภาษาเดียว ที่มีช่องโหว่ประเภทนี้
มันเกิดได้หลายภาษา
ที่อนุญาติให้เรียกคำสั่งของระบบปฏิการโดยตรง
เช่น C#, Python, PHP และหลายๆ ภาษาที่ไม่ได้เอ่ยถึง
:
++++วิธีป้องกัน+++
🤔 ต้อง validate ข้อมูล input อย่างเข้มงวด เช่น
- กรอง input ที่เข้ามา กำหนดว่ามีอะไรได้บ้าง?
- input ที่เข้ามา ห้ามเป็นคำสั่งของระบบปฏิบัติการเด็ดขาด
- ห้ามมี && และ ; อยู่ใน input ที่เข้ามา
- เป็นต้น
.
😏 หรือจะเลี่ยงวิธีเขียนเรียกคำสั่งของระบบปฏิบัติการโดยตรง ไม่ต้องใช้ก็ย่อมได้
++++
เขียนโดย โปรแกรมเมอร์ไทย thai programmer
.
ดูตัวอย่างเพิ่มเติม
https://www.owasp.org/index.php/Command_Injection
👨 🏫 In the photo, for example, the loophole of programming.
Open doors for the evil wills to attack by the way.
Command Injection
.
This loophole is born in many programming languages.
Permission to call direct order of operating system
Who randomly risked this opportunity attacker to inject an order into code.
By ending with a text &&
It's so dangerous to insert like
:
del / F F on window
or rm-rf rf on linux
:
In the picture, for example, Java language code.
Which works on Window
Will see that I can use && and then end up with any order.
Like && tasklist && dir etc.
.
And if the program runs in linux / Unix
Can continue with chain order with text && or; either.
:
And not Java the only language has this type of loophole
It can be born in many languages.
Allowing to call direct command of the operational system.
Like C #, Python, PHP and many languages that are not mentioned.
:
++++ How to prevent +++
🤔 Must strictly validate input information like
- Input filter that comes to determine what's available?
- Input that comes to prohibit is an order of an operating system.
- Don't have && and; stay input that comes.
- etc.
.
😏 or avoid the way to write, call direct command of an operating system. No need to use it.
++++
Written by Thai programmer thai coder
.
See more previews
https://www.owasp.org/index.php/Command_InjectionTranslated
rm rf 在 Lukas Engström Youtube 的最佳貼文
The first 1,000 people to use this link will get a 1 month free trial of Skillshare: https://skl.sh/lukasengstrm09211
Do you want to see MORE videos like this one?
Please consider joining my YouTube channel to get access to exclusive perks and also support me as all my income will go directly back into the channel: https://www.youtube.com/channel/UCJQ4cxWeJk2eM4vVRRC9cbg/join
Don't forget to also check out the Lukas in Taiwan podcast:
Apple Podcasts:
https://podcasts.apple.com/us/podcast/lukas-in-taiwan-外國人介紹台灣/id1577985574
Spotify:
https://open.spotify.com/show/7mNfSG9wMVEP1NTI33scky?si=WhTOsIYDQv2oYQ6TRQKLzw&dl_branch=1
Please note that my Patreon now is inactive, but that you are welcome to support me there as well if my YouTube membership is not enough: https://www.patreon.com/LukasEngstrom
Please also follow me on:
Facebook: www.facebook.com/LukasTaiwan
Instagram: www.instagram.com/LukasEngstrom
If you want to send my something that might be shown in a future video, please send it to:
ATT: Lukas
RM. 2, 6F., NO.201, FUHE RD.,
YONGHE DIST., NEW TAIPEI CITY 23450,
TAIWAN (R.O.C.)
Business inquiries:
中文/English
創作者經紀人/Contact person: - Maggie
Line ID: @redi
Email: contact@lukasengstrom.com
The following is the gear I’m using when making my videos. I’m part of Amazon Services LLC Associates Program which means that I will get a small commission if you purchase anything via my links. Any commission I’ll be getting will go straight back into buying new gear for my future videos, so any kind of support is highly appreciated!
Cameras:
Canon EOS R (main camera): https://amzn.to/3fCbINR
Canon M50 (B-cam): https://amzn.to/2Tf998r
Insta360 One X 2 (Best 360 camera): https://www.insta360.com/sal/one_x2?insrc=INRAIR0
Insta 360 One R (Best 360/action cam combo): https://www.insta360.com/sal/one_r?insrc=INRAIR0
Lenses:
Canon RF 15-35mm F2.8 L IS USM: https://amzn.to/3o4N8YZ
Canon RF 24-70mm F2.8 L IS USM: https://amzn.to/34RDy1V
Canon EF 24mm f/1.4L II USM: https://amzn.to/2O0a62Y
Canon EF 50mm f/1.8 STM https://amzn.to/2O5DJA0
Canon EF-S 10-18mm f/4.5-5.6 IS STM: https://amzn.to/2X88oR7
Studio equipment:
2x Rode NT2A Microphone set: https://amzn.to/3fBoOuK
Ninja V recorder: https://amzn.to/36azTzR
SanDisk Ultra 3D 1TB SSD: https://amzn.to/36f1pfH
SanDisk Ultra 3D 2TB SSD: https://amzn.to/3fErckb
DJI:
Drone: DJI Mavic 2 Zoom: https://amzn.to/2Sak4CX
Mavic 2 Fly More Kit: https://amzn.to/2TlpLLT
Gimbal: DJI Ronin-S Handheld 3-Axis: https://amzn.to/2NG4L20
Other:
Microphone: RØDE VideoMic Pro+: https://amzn.to/2Tg9mbx
2x SanDisk Extreme Pro Memory Card (128GB): https://amzn.to/2Oi0CQX
Bag: Lowepro ProTactic BP 450 AW II:https://amzn.to/2NDbCsN
Canon EOS M Mount Adapter: https://amzn.to/2O1jH9I
Canon EF-EOS R Mount Adapter: https://amzn.to/2NDak0V
JOBY Gorillapod 3K: https://amzn.to/2S3GQfR
ADATA SD600Q SSD (240GB): https://amzn.to/2Wp28Tf
ADATA D8000L LED Power Bank: https://amzn.to/34MrlLY
Transcend ESD240C Portable SSD (480GB): https://amzn.to/2X5L7xW
Transcend ESD350C Portable SSD (480GB): https://amzn.to/32LBzeg
Transcend StoreJet 25MC HDD (1TB): https://amzn.to/2KekmUd
Transcend 128GB microSD: https://amzn.to/2tCkOmw
MacBook Pro 16”: https://amzn.to/3fElb77 Asus VP28UQG 28" 4K/UHD monitor: https://amzn.to/2CE5eeI
![post-title](https://i.ytimg.com/vi/EN4P4K_PP_s/hqdefault.jpg)
rm rf 在 Lukas Engström Youtube 的精選貼文
Check out our newly arrived Ginger shot and other drinks at: https://jbw.tw/lukas
YouTube fans get 10% off the entire store!
Do you want to see MORE videos like this one?
Please consider joining my YouTube channel to get access to exclusive perks and also support me as all my income will go directly back into the channel: https://www.youtube.com/channel/UCJQ4cxWeJk2eM4vVRRC9cbg/join
Don't forget to also check out the Lukas in Taiwan podcast:
Apple Podcasts:
https://podcasts.apple.com/us/podcast/lukas-in-taiwan-外國人介紹台灣/id1577985574
Spotify:
https://open.spotify.com/show/7mNfSG9wMVEP1NTI33scky?si=WhTOsIYDQv2oYQ6TRQKLzw&dl_branch=1
Please note that my Patreon now is inactive, but that you are welcome to support me there as well if my YouTube membership is not enough: https://www.patreon.com/LukasEngstrom
Please also follow me on:
Facebook: www.facebook.com/LukasTaiwan
Instagram: www.instagram.com/LukasEngstrom
If you want to send my something that might be shown in a future video, please send it to:
ATT: Lukas
RM. 2, 6F., NO.201, FUHE RD.,
YONGHE DIST., NEW TAIPEI CITY 23450,
TAIWAN (R.O.C.)
Business inquiries:
中文/English
創作者經紀人/Contact person: - Maggie
Line ID: @redi
Email: contact@lukasengstrom.com
The following is the gear I’m using when making my videos. I’m part of Amazon Services LLC Associates Program which means that I will get a small commission if you purchase anything via my links. Any commission I’ll be getting will go straight back into buying new gear for my future videos, so any kind of support is highly appreciated!
Cameras:
Canon EOS R (main camera): https://amzn.to/3fCbINR
Canon M50 (B-cam): https://amzn.to/2Tf998r
Insta360 One X 2 (Best 360 camera): https://www.insta360.com/sal/one_x2?insrc=INRAIR0
Insta 360 One R (Best 360/action cam combo): https://www.insta360.com/sal/one_r?insrc=INRAIR0
Lenses:
Canon RF 15-35mm F2.8 L IS USM: https://amzn.to/3o4N8YZ
Canon RF 24-70mm F2.8 L IS USM: https://amzn.to/34RDy1V
Canon EF 24mm f/1.4L II USM: https://amzn.to/2O0a62Y
Canon EF 50mm f/1.8 STM https://amzn.to/2O5DJA0
Canon EF-S 10-18mm f/4.5-5.6 IS STM: https://amzn.to/2X88oR7
Studio equipment:
2x Rode NT2A Microphone set: https://amzn.to/3fBoOuK
Ninja V recorder: https://amzn.to/36azTzR
SanDisk Ultra 3D 1TB SSD: https://amzn.to/36f1pfH
SanDisk Ultra 3D 2TB SSD: https://amzn.to/3fErckb
DJI:
Drone: DJI Mavic 2 Zoom: https://amzn.to/2Sak4CX
Mavic 2 Fly More Kit: https://amzn.to/2TlpLLT
Gimbal: DJI Ronin-S Handheld 3-Axis: https://amzn.to/2NG4L20
Other:
Microphone: RØDE VideoMic Pro+: https://amzn.to/2Tg9mbx
2x SanDisk Extreme Pro Memory Card (128GB): https://amzn.to/2Oi0CQX
Bag: Lowepro ProTactic BP 450 AW II:https://amzn.to/2NDbCsN
Canon EOS M Mount Adapter: https://amzn.to/2O1jH9I
Canon EF-EOS R Mount Adapter: https://amzn.to/2NDak0V
JOBY Gorillapod 3K: https://amzn.to/2S3GQfR
ADATA SD600Q SSD (240GB): https://amzn.to/2Wp28Tf
ADATA D8000L LED Power Bank: https://amzn.to/34MrlLY
Transcend ESD240C Portable SSD (480GB): https://amzn.to/2X5L7xW
Transcend ESD350C Portable SSD (480GB): https://amzn.to/32LBzeg
Transcend StoreJet 25MC HDD (1TB): https://amzn.to/2KekmUd
Transcend 128GB microSD: https://amzn.to/2tCkOmw
MacBook Pro 16”: https://amzn.to/3fElb77 Asus VP28UQG 28" 4K/UHD monitor: https://amzn.to/2CE5eeI
![post-title](https://i.ytimg.com/vi/eVgLMP6Cy8U/hqdefault.jpg)
rm rf 在 Lukas Engström Youtube 的精選貼文
Huge thank you to @lifeintaiwan and https://www.youtube.com/c/annieaiyo for joining this video podcast talking about everything from teaching in the US, raising kids in South Africa and being recognized in Taiwan!
#Podcast #外國人介紹台灣 #HotOnes
Do you want to see MORE videos like this one?
Please consider joining my YouTube channel to get access to exclusive perks and also support me as all my income will go directly back into the channel: https://www.youtube.com/channel/UCJQ4cxWeJk2eM4vVRRC9cbg/join
Don't forget to also check out the Lukas in Taiwan podcast:
Apple Podcasts:
https://podcasts.apple.com/us/podcast/lukas-in-taiwan-外國人介紹台灣/id1577985574
Spotify:
https://open.spotify.com/show/7mNfSG9wMVEP1NTI33scky?si=WhTOsIYDQv2oYQ6TRQKLzw&dl_branch=1
Please note that my Patreon now is inactive, but that you are welcome to support me there as well if my YouTube membership is not enough: https://www.patreon.com/LukasEngstrom
Please also follow me on:
Facebook: www.facebook.com/LukasTaiwan
Instagram: www.instagram.com/LukasEngstrom
If you want to send my something that might be shown in a future video, please send it to:
ATT: Lukas
RM. 2, 6F., NO.201, FUHE RD.,
YONGHE DIST., NEW TAIPEI CITY 23450,
TAIWAN (R.O.C.)
Business inquiries:
中文/English
創作者經紀人/Contact person: - Maggie
Line ID: @redi
Email: contact@lukasengstrom.com
The following is the gear I’m using when making my videos. I’m part of Amazon Services LLC Associates Program which means that I will get a small commission if you purchase anything via my links. Any commission I’ll be getting will go straight back into buying new gear for my future videos, so any kind of support is highly appreciated!
Cameras:
Canon EOS R (main camera): https://amzn.to/3fCbINR
Canon M50 (B-cam): https://amzn.to/2Tf998r
Insta360 One X 2 (Best 360 camera): https://www.insta360.com/sal/one_x2?insrc=INRAIR0
Insta 360 One R (Best 360/action cam combo): https://www.insta360.com/sal/one_r?insrc=INRAIR0
Lenses:
Canon RF 15-35mm F2.8 L IS USM: https://amzn.to/3o4N8YZ
Canon RF 24-70mm F2.8 L IS USM: https://amzn.to/34RDy1V
Canon EF 24mm f/1.4L II USM: https://amzn.to/2O0a62Y
Canon EF 50mm f/1.8 STM https://amzn.to/2O5DJA0
Canon EF-S 10-18mm f/4.5-5.6 IS STM: https://amzn.to/2X88oR7
Studio equipment:
2x Rode NT2A Microphone set: https://amzn.to/3fBoOuK
Ninja V recorder: https://amzn.to/36azTzR
SanDisk Ultra 3D 1TB SSD: https://amzn.to/36f1pfH
SanDisk Ultra 3D 2TB SSD: https://amzn.to/3fErckb
DJI:
Drone: DJI Mavic 2 Zoom: https://amzn.to/2Sak4CX
Mavic 2 Fly More Kit: https://amzn.to/2TlpLLT
Gimbal: DJI Ronin-S Handheld 3-Axis: https://amzn.to/2NG4L20
Other:
Microphone: RØDE VideoMic Pro+: https://amzn.to/2Tg9mbx
2x SanDisk Extreme Pro Memory Card (128GB): https://amzn.to/2Oi0CQX
Bag: Lowepro ProTactic BP 450 AW II:https://amzn.to/2NDbCsN
Canon EOS M Mount Adapter: https://amzn.to/2O1jH9I
Canon EF-EOS R Mount Adapter: https://amzn.to/2NDak0V
JOBY Gorillapod 3K: https://amzn.to/2S3GQfR
ADATA SD600Q SSD (240GB): https://amzn.to/2Wp28Tf
ADATA D8000L LED Power Bank: https://amzn.to/34MrlLY
Transcend ESD240C Portable SSD (480GB): https://amzn.to/2X5L7xW
Transcend ESD350C Portable SSD (480GB): https://amzn.to/32LBzeg
Transcend StoreJet 25MC HDD (1TB): https://amzn.to/2KekmUd
Transcend 128GB microSD: https://amzn.to/2tCkOmw
MacBook Pro 16”: https://amzn.to/3fElb77 Asus VP28UQG 28" 4K/UHD monitor: https://amzn.to/2CE5eeI
![post-title](https://i.ytimg.com/vi/vn5UNY2b0cw/hqdefault.jpg)
rm rf 在 Sudo rm -rf: Efficient Networks for Universal Sound Source ... 的推薦與評價
Code for SuDoRm-Rf networks for efficient audio source separation. SuDoRm-Rf stands for SUccessive DOwnsampling and Resampling of Multi-Resolution Features ... ... <看更多>
rm rf 在 Is `yes | rm -r` safer than `rm -rf`? - Unix & Linux Stack Exchange 的推薦與評價
Short answer. No. However, I really like your creativity of piping commands together. Still, yes|rm -r is a nice example of UUOC (useless ... ... <看更多>
rm rf 在 What does [rm -rf /] do? - Stack Overflow 的推薦與評價
... <看更多>