Z shell

Uh, are you using Kitty? What are you using right now?

Uh, [laughs] uh, like, Z Shell and Tmux.

Okay.

It's like-

I just wish it went back to infinity.

Annie, I'm sure there's a way to adopt a ZSH file to make it do that.

I'm sure there is.

I haven't quite figured it out from lack of effort rather than lack of trying, you

Okay, also at PowerShell support.

And then now we have shell completion scripts for Bash, ZShell, Phish, and PowerShell.

The agent has tested it interactively, driving it through tmux and made sure it's fast.

And now it's just there.

A hidden Swift binary that fishes the login password in process, dumps keychain and browser data, scoops wallets and developer secrets, then exfiltrates over HTTPS.

Generation 2 launchers embed the markers SONOMAC1 and SONOMAB in the mako__const section, spliced into strings that look like USR, BIN, ZSH and COM.

Apple.

Quarantine.

Someone searching for StreamYard or Slack, or accepting a, join our podcast, Calendar Invite, downloads a. dmg or zip the volume looks like an installer the binary inside is ad hoc signed no developer id no notarization no team id on first run the launcher strips gatekeeper's quarantine flag xattrdrcom apple quarantine and in gen 2 also xattrcr then runs a second stage older builds dropped tmp app boots trap xxxxxx executed it with bin zsh and unlinked diet newer builds prefer bin zshs and a pipe so less lands on disk pid command what it proves 905 launcher first stage 1027 xattr dr com Apple, Quarantine, Users, Admin, Desktop, Launcher, Gatekeeper, Strip on the Stub 968-907 XATTR-CR, Users and XATTR Drive.

Users Gen 2 also uses CR.

Overly broad target in this run 1028, 1032, 1092, 1097 ZSHS second stage on a pipe, not.

App Boots Trap 1035 Curl, PK Gunpack 0, TMP.

So one thing with this, when you were in the shell, so when you did Pixie Shell, it looks like you get autocomplete.

Do you get autocomplete when you do the Pixie Run command? I think Wolf and I were looking at this before, and I think that because he was using the ZSH shell, it was difficult to set up, and he didn't do it before we were talking last time.

But I don't know what shell you're using.

It looks like it could be ZSH.

Do you get autocomplete with your Pixie Run command?

Yeah.

And I've actually used that quite a bit, by the way.

If anything has a .file configuration, for example, like my terminal, like ZS, ZSH, which is like my terminal.

Um, what is it called? Like it's a theme or something.

I don't think, I don't know if it's a theme or just like a, a version of the bash bash terminal.

Mm

... and, uh, zsh.

I, you know, you know me, I'm a big fan of, like, elite offensive coordinators, especially, uh, you know, with the young quarterbacks like they got out there.

Uh, Justin Herbert's not a young quarterback, but you, you know, you get my drift-

Precisely.

Though, do watch out if you run ZSH scripts in auto mode.

They've patched a security edge case where command substitutions hidden inside assignments like report time or darstack size were auto-approving.

Now those will properly prompt you for approval.