It turns out the malware doesn’t work because it runs subprocess.run([“rm”, “-rf”, “/*”])
That will never delete anything, since there is no shell to expand the glob in /* here, so rm gets a literal /* as the patht to delete 😭
Comment on If you use Emudeck to play Wii U games, you may have malware
Fubarberry@sopuli.xyz 6 hours ago
Also I thought this part was interesting:
Special note for Israeli users: If the malware determines that your location is Israel (it does this via locale and timezone checks) then it has a 1:6 chance that it will play a loud siren sound and run rm -rf /, essentially attempting to wipe your filesystem.
It turns out the malware doesn’t work because it runs subprocess.run([“rm”, “-rf”, “/*”])
That will never delete anything, since there is no shell to expand the glob in /* here, so rm gets a literal /* as the patht to delete 😭
This is why you test your code, people
Whew, thankfully it didn’t work on my machine!
That’s prettyfuvking based
That’s kind of awesome
I think I’m on team malware now
That’s not malware.
That’s amazing.
It also trys to steal passwords/keys/etc, the Russian roulette part is just extra for people in Israel.
Is this considered Chaotic Good or Lawful Evil?
Definitely not evil
That’s fair. I hope Israel gets what’s coming to them.
Maybe now they’ll figure out that they need to vote Netanyahu out of office for being a genocidal piece of shit
Right they need a properly omnicidal megalomanic no mere genocide
Unless the option –no-preserve-root is given, it should not execute.
Fun fact:
rm -rf / requires —no-preserve-root to work whereas rm -rf /* doesn’t.
That’s because the /* gets expanded by the shell before the command runs and it only sees the request to delete /var, /dev, /home, /usr,… recursively but not / specifically.
On another note: This line in the code doesn’t run through a shell and thus this won’t work and it just tries to delete the literal path of /* recursively - and thus fails to do any damage…
SarahValentine@lemmy.blahaj.zone 5 hours ago
From the river to the C:/