It’s if you write a program that allows the end user to call a command prompt and don’t carefully sanitize the input, bad things could happen.
I mean, maybe Windows could do something different but if you wrote JavaScript that takes text input from a webpage and pass it to “sudo bash ##commands”, you’re going to have a bad time.
It’s complete click bait because Rust has a reputation for security.
BARD App iOS. For those that did not know, the BARD app has some built in Siri commands, but you have to activate them before they will work. You can do things like start, stop, different sleep timers, set bookmarks, and jump backwards and forwards by time increments. there are also a few interactive commands. To activate any of them, go to the settings tab, swipe to Siri Settings, Double tap the now reading audio button. The commands are divided into 2 categories; Playback, and Navigate, just double tap the category you want. For each command, there will be an add to siri button. If you double tap the button, it will add it to Siri and bring up a screen for that command. The command you will say to Siri will be in the edit field, just double tap to change it if you want. Once things are set, just hit the done button. It will put you back in the BARD app. Its that easy. I like the interactive commands. As you swipe through the list, it will tell you if it is interactive. What that means is that once the command is given, Siri will give you a list of choices to choose from. For example, there is a sleep timer interactive command. If you set this up, then when you say the command, Siri will come back and ask you if you want to set a 15 minute, 30 minute, 45 minute, 60 minute timer, or end of chapter sleep timer. You just tell her what you want, and it is set. I like the interactive commands because you are given choices. These are probably something that I will not always use, but it will be good to have some set up for times they can come in handy. #iPhone#iOS#BARD#Siri#Shortcuts#Commands#HandsFree
Critical Rust flaw enables Windows command injection attacks (www.bleepingcomputer.com)