Hacker News Reader

> This issues goes way back: imagine if after executing a program on CLI instead of closing it gave you a fake shell, where you eventually went about your day until you had to type your password into sudo..

As a fun fact, even worse might be a program maliciously aliasing sudo in ~/.profile

View on HN

That's a spooky one, although I've never heard of that happening in practice before.

But then again how, how someone know if that happened!

They'd have to know to look for it, but running `alias sudo` would show if it had an alias assigned to it. It would honestly be more effective to change $PATH to include the malicious version of sudo.

Reply on news.ycombinator.com