you are viewing a single comment's thread
view the rest of the comments
[โ€“] 7 points 3 years ago (1 child)

And never run commands copied from a web page, even if you do know them.

JavaScript's copy/paste API means a website owner or an attacker can change the contents of your clipboard after you press copy, and you'll end up pasting malicious commands into your shell. I think Firefox blocks this now, don't know about Chrome.

  • source
  • parent
  • hideshow 2 child comments