Repository navigation
TO PREVENT MALWARE | Show warning when pasting something into a newly opened terminal #20418
mango (mangoess)
started this conversation in
Ideas
Replies: 1 comment
|
A lot of this type of malware uses the Run command (Windows Key and r) so something is needed there as well. Web browsers already have some protection for downloaded files, adding a "Mark of the Web" flag to those, with the flag then being using by applications to restrict features when open those files. Perhaps something similar is needed for clipboard contents, so if a browser puts something on the clipboard, it adds a "Mark of the Web" flag and then when someone tries to paste that content into the run box it is denied with a warning. The Terminal could also use this flag to deny the paste but should also have a setting to allow those sort of pastes to happen if the users if ok with it. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
CAPTCHA's now ask us to orient animals to the direction of the arrow, and to recognize which image is something that a tiger would chase after. The fact that people are more used to doing more actions for these tests is something that bad actors rely on for malicious CAPTCHA looking popups or redirects.
RECENTLY, It is easier for people to open the terminal and paste in whatever a pretend CAPTCHA may have copied to their clipboard.
I don't think it is too out of the question to put in place a GUI when someone pastes something in the terminal within a minute or two of its opening, a GUI that confirms if they want to paste something in and to be weary of malware.
(^ for a terminal that has been running for some time, or a user that disabled it, this warning would not show up)
Please let me know what you think, whether you love it, or think it will lead to wasted productivity and annoyance for those of us who regularly use the terminal.
All reactions