• FYI - links2 Browser

    From karl@21:1/161 to All on Saturday, September 17, 2016 01:59:00
    ***Very, Very Important***
    I just noticed that the links2 text web browser by default has a menu option which allows the user to drop to the shell which is a *HUGE* let me repeat *HUGE* risk.

    If I run the command links2 with "-anonymous" the option to drop to shell is not there as well as the ability to download content seems to be gone.

    Even with the -anonymous option, I still feel like the risk is probably not worth it for a BBS sysop.

    --
    Karl
    The Search BBS

    --- Mystic BBS v1.12 A31 (Raspberry Pi)
    * Origin: The Search BBS (21:1/161)
  • From Pequito@21:1/126 to karl on Saturday, September 17, 2016 04:39:00
    On 09/17/16, karl said the following...

    ***Very, Very Important***
    I just noticed that the links2 text web browser by default has a menu option which allows the user to drop to the shell which is a *HUGE* let
    me repeat *HUGE* risk.

    If I run the command links2 with "-anonymous" the option to drop to
    shell is not there as well as the ability to download content seems to
    be gone.

    Even with the -anonymous option, I still feel like the risk is probably not worth it for a BBS sysop.

    Nice info, thinking I saw this enabled on someone's system just do not
    remember which one since I check out quite a few.

    --- Mystic BBS v1.12 A31 (Linux)
    * Origin: Twinkle BBS (21:1/126)