Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
iopuy
on Dec 17, 2012
|
parent
|
context
|
favorite
| on:
Linux terminal keylogger in userspace
Echo the LD_PRELOAD environment variable first and check for anything suspect.
lordlicorice
on Dec 17, 2012
|
next
[–]
Unless the shared object file also includes an override for the function that expands environment variables to lie about the true value of LD_PRELOAD.
est
on Dec 17, 2012
|
prev
[–]
the twist: echo is also hijacked...
iopuy
on Dec 17, 2012
|
parent
[–]
Okay... just type "Export" then.
DannyBee
on Dec 17, 2012
|
root
|
parent
[–]
okay, so now the getenv call is hijacked too. You can play this game all day, as long as the environment is stored in user space, you can get it and fake the output.
Consider applying for YC's Fall 2026 batch!
Applications
are open till July 27.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
