[GH-ISSUE #5] Joke or not, dangerous #1

Closed
opened 2026-03-02 02:12:18 +03:00 by kerem · 8 comments
Owner

Originally created by @dazoe on GitHub (Jan 2, 2023).
Original GitHub issue: https://github.com/amidaware/tacticalrmm-web/issues/5

github.com/amidaware/tacticalrmm-web@3a45c2a309/src/composables/agents.js (L31)

This may be a joke but I know some where some one will try to run the placeholder command. Maybe change it to something a bit safer?

Originally created by @dazoe on GitHub (Jan 2, 2023). Original GitHub issue: https://github.com/amidaware/tacticalrmm-web/issues/5 https://github.com/amidaware/tacticalrmm-web/blob/3a45c2a30910b5da50b814f3ca6285576aaa5aa4/src/composables/agents.js#L31 This may be a joke but I know some where some one will try to run the placeholder command. Maybe change it to something a bit safer?
kerem closed this issue 2026-03-02 02:12:18 +03:00
Author
Owner

@dinger1986 commented on GitHub (Jan 2, 2023):

As in type the command out to see what it will do?

<!-- gh-comment-id:1369144534 --> @dinger1986 commented on GitHub (Jan 2, 2023): As in type the command out to see what it will do?
Author
Owner

@dazoe commented on GitHub (Jan 2, 2023):

That's what I was thinking. They click on run command and see the placeholder text and type it out just to see what it will do.

<!-- gh-comment-id:1369145039 --> @dazoe commented on GitHub (Jan 2, 2023): That's what I was thinking. They click on run command and see the placeholder text and type it out just to see what it will do.
Author
Owner

@dinger1986 commented on GitHub (Jan 2, 2023):

Do you want to PR a change?

I'd be really worried about someone having an RMM tool and god privileges on a machine and not know immediately that the place holder text is a joke!

It probably does need changed at some point however

<!-- gh-comment-id:1369147944 --> @dinger1986 commented on GitHub (Jan 2, 2023): Do you want to PR a change? I'd be really worried about someone having an RMM tool and god privileges on a machine and not know immediately that the place holder text is a joke! It probably does need changed at some point however
Author
Owner

@dazoe commented on GitHub (Jan 2, 2023):

I worked at a few MSPs and yes, there are people out there with access to RMM tools that wouldn't know what that command does. Mostly due to the fact that they are more GUI oriented type and don't do much with command line.
As for a different command for an example, not sure what would be a good example to use. Need to be something that can easily be converted to each of the other example but also something to showcase the ability to use flag options and arguments. Suggestions? I was thinking of something simple like ping with a few options? Will need to have options for the linux example due to the default of pinging for ever.

<!-- gh-comment-id:1369164511 --> @dazoe commented on GitHub (Jan 2, 2023): I worked at a few MSPs and yes, there are people out there with access to RMM tools that wouldn't know what that command does. Mostly due to the fact that they are more GUI oriented type and don't do much with command line. As for a different command for an example, not sure what would be a good example to use. Need to be something that can easily be converted to each of the other example but also something to showcase the ability to use flag options and arguments. Suggestions? I was thinking of something simple like ping with a few options? Will need to have options for the linux example due to the default of pinging for ever.
Author
Owner

@dinger1986 commented on GitHub (Jan 2, 2023):

Guess ping would be fine, not saying it will be accepted as it's not my decision

<!-- gh-comment-id:1369170968 --> @dinger1986 commented on GitHub (Jan 2, 2023): Guess ping would be fine, not saying it will be accepted as it's not my decision
Author
Owner

@wh1te909 commented on GitHub (Jan 2, 2023):

TRMM has a permissions system where you can prevent users from sending commands and/or running scripts. Someone who doesn't understand what the placeholder command does should either have restricted permissions, or better yet not have RMM access at all since they will inevitably run some other dangerous command and bork the system.

Anyway this was just an easter egg that I added like 4 years ago from the very beginning and never bothered to change it cuz so many people have found it funny. What I can do is make the placeholder text customizable so you can make it say whatever you want. I will implement this in the next release and update the docs with instructions on how to change the placeholder text to whatever you want.

<!-- gh-comment-id:1369245322 --> @wh1te909 commented on GitHub (Jan 2, 2023): TRMM has a permissions system where you can prevent users from sending commands and/or running scripts. Someone who doesn't understand what the placeholder command does should either have restricted permissions, or better yet not have RMM access at all since they will inevitably run some other dangerous command and bork the system. Anyway this was just an easter egg that I added like 4 years ago from the very beginning and never bothered to change it cuz so many people have found it funny. What I can do is make the placeholder text customizable so you can make it say whatever you want. I will implement this in the next release and update the docs with instructions on how to change the placeholder text to whatever you want.
Author
Owner

@dazoe commented on GitHub (Jan 2, 2023):

Sounds like a good option

<!-- gh-comment-id:1369246764 --> @dazoe commented on GitHub (Jan 2, 2023): Sounds like a good option
Author
Owner

@wh1te909 commented on GitHub (May 26, 2023):

added, will be in next release

<!-- gh-comment-id:1565020149 --> @wh1te909 commented on GitHub (May 26, 2023): added, will be in next release
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/tacticalrmm-web#1
No description provided.