On Tuesday, 20 February 2018 01:49:37 CET Marek Marczykowski-Górecki wrote: > We've decided to deprecate the '$' character from qrexec-related usage. > Instead, to denote special tokens, we will use the '@' character, > which we believe is less likely to be interpreted in a special way > by the relevant software.
I would argue against the @ sign on account that it is a special character in bash as well. Search for it here; https://linux.die.net/man/1/bash I don't immediately see a way to exploit it, but why risk it? -- Tom Zander Blog: https://zander.github.io Vlog: https://vimeo.com/channels/tomscryptochannel -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/4514339.zi2rDXN2r4%40strawberry. For more options, visit https://groups.google.com/d/optout.
