![](/static/253f0d9b/assets/icons/icon-96x96.png)
![](https://programming.dev/pictrs/image/8140dda6-9512-4297-ac17-d303638c90a6.png)
This, btw, is why CVE scores are insane at times.
The vulnerability is that when spawning a new process which is a bat file you need special treatment of the arguments to avoid spawning a second process.
So you need a rust program setup to spawn other processes which also somehow forwards unparsed user input into those processes and is executing a bat file.
There’s a reason nobody has fixed this, it’s because it’s an insane setup that affects basically no rust programs.
At least in the US, it’s not just Netanyahu that’s an issue. A lot of the mainstream media is making the same conflation.
That’s why you’ll see in articles like this one https://www.nytimes.com/2024/04/23/nyregion/columbia-university-campus-protests.html which focus far more on students saying dumb shit at a protest and less on the ongoing genocide.
And you have to take what is being claimed as “antisemitic” with a huge grain of skepticism. I’ve seen claims that statements like “free Palestine” and “from the rivers to the seas” are “antisemitic”.
This is problematic because even if you wanted to address antisemitism, focusing on people protesting a genocide is not the way to go. Instead, let’s focus on the avowed Nazis parading around CPAC. Or maybe the Nazis in favor of Israel’s genocide. Maybe we should wrestle with why antisemities are so often pro Israel.