You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
TIL that on windows, cmd.exe /c implements a CVE for you by default, by automagically interpreting any passed *command line* as a *filename with spaces*. You need to pass /s to turn off the free CVE. So cmd /c "ping http://evil.com/../../../../../../windows/calc.exe" pops calc.
Wine implements it too, here's the pile of automagic nonsense that you need to explicitly turn off: https://github.com/wine-mirror/wine/blob/master/programs/cmd/wcmdmain.c#L2586 … Yes it literally is taking the entire command, spaces and all, and trying it as a single space-containing file path before actually trying it as a command
Here are the MS docs on this behavior, which are almost incomprehensible:https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/cmd …
Toy OS
And conhost.exe /r ......
the reason this is still there is most likely "we know that vulnerability, but 10-20 years of programs and scripts depend on it, so we can't change it".
Slash c, not dash c.
why doesn't it just fail if it doesn't find a directory named "ping http://evil.com" ?
Because Windows simplifies ..\ components in paths *before* actually hitting the filesystem.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
