Beep security update

#1

Post by DyslexicAtheist » Wed, Apr 04, 2018, 8:26 AM UTC

Re: Beep security update

#2

Post by Y_Y » Wed, Apr 04, 2018, 9:23 AM UTC

Can't one just

    sudo echo -e "\7”

anyway? Or if you're trying to do something fancier there is snd-pcsp which lets use use the piezo as a normal ALSA device (quality may vary). Not that many modern machines even include such a useful device.

Re: Beep security update

#3

Post by nxtafan » Wed, Apr 04, 2018, 9:24 AM UTC

https://github.com/johnath/beep/issues/11#issuecomment-37838...

Re: Beep security update

#4

Post by dblotsky » Wed, Apr 04, 2018, 9:26 AM UTC

Y_Y wrote: post #2

Can't one just sudo echo -e "\7” anyway? Or if you're trying to do something fancier there is snd-pcsp which lets use use the piezo as a normal ALSA device (quality may vary). Not that many modern machines even include such a useful device.

Nitpick: on my machine, that's:

    sudo echo -e "\07"

Re: Beep security update

#5

Post by Retr0spectrum » Wed, Apr 04, 2018, 9:28 AM UTC

Y_Y wrote: post #2

Can't one just sudo echo -e "\7” anyway? Or if you're trying to do something fancier there is snd-pcsp which lets use use the piezo as a normal ALSA device (quality may vary). Not that many modern machines even include such a useful device.

Why would that need root? Is it not up to your terminal emulator to interpret the \7 and trigger the actual beep?

Re: Beep security update

#6

Post by alex_duf » Wed, Apr 04, 2018, 9:29 AM UTC

That's hilarious

Re: Beep security update

#7

Post by scbrg » Wed, Apr 04, 2018, 9:30 AM UTC

Y_Y wrote: post #2

Can't one just sudo echo -e "\7” anyway? Or if you're trying to do something fancier there is snd-pcsp which lets use use the piezo as a normal ALSA device (quality may vary). Not that many modern machines even include such a useful device.

I guess the whole point of setuid is that no, you can't always "just sudo" :-)

Re: Beep security update

#8

Post by akrasuski1 » Wed, Apr 04, 2018, 9:36 AM UTC

Also see https://holeybeep.ninja/

Re: Beep security update

#9

Post by gall0ws » Wed, Apr 04, 2018, 9:37 AM UTC

Y_Y wrote: post #2

Can't one just sudo echo -e "\7” anyway? Or if you're trying to do something fancier there is snd-pcsp which lets use use the piezo as a normal ALSA device (quality may vary). Not that many modern machines even include such a useful device.

Yes, it tries to do fancy things with ioctl().

Re: Beep security update

#10

Post by rnhmjoj » Wed, Apr 04, 2018, 9:37 AM UTC

Retr0spectrum wrote: post #5

Y_Y wrote: post #2

Can't one just sudo echo -e "\7” anyway? Or if you're trying to do something fancier there is snd-pcsp which lets use use the piezo as a normal ALSA device (quality may vary). Not that many modern machines even include such a useful device.

Why would that need root? Is it not up to your terminal emulator to interpret the \7 and trigger the actual beep?

See the "A note about ioctl" section of the README: https://github.com/johnath/beep