Skip to content

Comment on Introducing Pow, a zero-configuration Rack server for Mac OS Xparent

Comments

Scripts with interpreters expose a race condition vulnerability whereby an attacker can quickly replace the script with their own before the interpreter, running with higher level privileges, finishes loading.

It is not really a script vs. binary issue so much as protecting against how scripts are loaded.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.