SDF Public Access Unix System • Hacker News Board

Re: SDF Public Access Unix System

#91

Post by seblon » Tue, Apr 21, 2026, 6:44 AM UTC

pratyahava wrote: post #70

seblon wrote: post #7

I found a way to escape their shell (so you can run whatever you want), if you're not verified, it involves multiple steps to archive this. I mailed them 2x to their membership address, but since today no reaction. I asked also in their IRC. Just a question to HN: should I wait more, try again? Or should I simply publish the vulnerabilities somewhere? If yes, where? It's my first time that I found a vulnerability at…

maybe try to fix it for them as soon as you have the root access?

Shell escape != Unix account escape :-)

Re: SDF Public Access Unix System

#92

Post by hanslub42 » Tue, Apr 21, 2026, 11:55 AM UTC

wmlavender wrote: post #77

hanslub42 wrote: post #67

Earlier quoted context omitted.

On Polarhome, I used QNX, SunOS/Solaris, HP-UX, AIX and OSX. Having those running under qemu would be quite the challenge. Until now, I have used qemu (or rather qemu-system-aarch64 in combination with binfmt-misc) on Linux to emulate e.g a Raspberry pi running on arm64. This works very well, but for e.g. Solaris or HP-UX there is the extra hurdle of getting hold of bootable media that will not freak out in the unfam…

Emulators can take you quite far, though you need to research some of them on the net to figure out working combinations of OS versions and emulator versions. Here are examples of things that I have managed to get to work at some point in time. Some for real software development and some for amusement. KVM (x86 and x86_64): Linux, BSD, OSX, Hurd, Haiku, MSDOS, Minix, QNX, RTEMS, Xenix, Solaris, UnixWare, Windows 95 t…

Thanks for the summary! This looks more doable than I thought....

Re: SDF Public Access Unix System

#93

Post by pratyahava » Tue, Apr 21, 2026, 12:33 PM UTC

seblon wrote: post #91

pratyahava wrote: post #70

Earlier quoted context omitted.

maybe try to fix it for them as soon as you have the root access?

Shell escape != Unix account escape :-)

oops, sorry, so it is not as bad as i imagined :) is it just a way to have an unlimited account for free?