Live data from Hacker News

Show HN: Online C/C++ to assembly visualizer [Weekend Project]

assembly.ynh.io

21–30 of 47 posts

Re: Show HN: Online C/C++ to assembly visualizer [Weekend Project]

#22
post #16

Earlier quoted context omitted.

#define x "/etc/passwd" #include x

I have now fixed it. But I think there must be an other way to make it safe. Maybe a sandbox

If it's a server used for other things, definitely a sandbox. gcc's not exactly security hardend. Best one (novel solution, though the code's old and shit) I've come across: https://pts-mini-gpl.googlecode.com/svn/trunk/uevalrun/doc/u...

Re: Show HN: Online C/C++ to assembly visualizer [Weekend Project]

#23
post #16

Earlier quoted context omitted.

#define x "/etc/passwd" #include x

I have now fixed it. But I think there must be an other way to make it safe. Maybe a sandbox

This is part of your /etc/shadow file:

    root:censored
We can still read /etc/ssh/ssh_host_rsa_key, etc.

Edit: removed hash, sorry

Re: Show HN: Online C/C++ to assembly visualizer [Weekend Project]

#25
post #23
post #16

Earlier quoted context omitted.

I have now fixed it. But I think there must be an other way to make it safe. Maybe a sandbox

This is part of your /etc/shadow file: root:censored We can still read /etc/ssh/ssh_host_rsa_key, etc. Edit: removed hash, sorry

Saying "you can read /etc/shadow by doing X, Y, and Z" is okay -- it's a permanent record there was a flaw. Saying "here's your root password hash" is not ok; even once the flaw is fixed, that hash is still floating around out there. I'd take advantage of the edit period and remove that from your comment; it's just not cool. The OP should definitely change the root password on the box regardless.

Re: Show HN: Online C/C++ to assembly visualizer [Weekend Project]

#27
post #16

Earlier quoted context omitted.

#define x "/etc/passwd" #include x

I have now fixed it. But I think there must be an other way to make it safe. Maybe a sandbox

I have now used a the wrapper by gcc-explorer https://github.com/mattgodbolt/gcc-explorer/blob/master/c-pr...

Re: Show HN: Online C/C++ to assembly visualizer [Weekend Project]

#29
post #23
post #16

Earlier quoted context omitted.

I have now fixed it. But I think there must be an other way to make it safe. Maybe a sandbox

This is part of your /etc/shadow file: root:censored We can still read /etc/ssh/ssh_host_rsa_key, etc. Edit: removed hash, sorry

No problem I think I could fix it.

Can you show us how you read the content of the file. Just want to learn more

Post reply on HN