Understanding Fork Bombs in 5 Minutes or Less

Sdílet
Vložit
  • čas přidán 9. 09. 2024
  • You've probably seen a fork bomb before, but do you understand how it works? In this video you'll find out.
    Hope you enjoyed the video!
    Check out some code on my GitHub:
    github.com/rea...
    github.com/eng...
    Other Social:
    / engineerman
    / _engineerman
    / discord

Komentáře • 131

  • @EngineerMan
    @EngineerMan  Před 9 měsíci +439

    Warning: Don't run this on your own system. If you want to test it, create a VM like I did.

    • @VRixxo123
      @VRixxo123 Před 9 měsíci +24

      Why not. Does it not go away ?

    • @acu01136
      @acu01136 Před 9 měsíci +18

      Surely hard rebooting the system stops the issue though? With all the normal problems with hard reboots ofcourse.

    • @benargee
      @benargee Před 9 měsíci +25

      He probably means that it's the easiest environment to test in and as a general disclaimer to not mess up a system critical machine. At the end of the day you can do whatever you want with your own hardware, just that he's not endorsing it.

    • @daidaloscz
      @daidaloscz Před 9 měsíci +58

      Nobody can stop me from running this on our production cluster.
      (I have sudo)

    • @iuhere
      @iuhere Před 9 měsíci +8

      Someone (YKIYK) said -
      Why are the warnings at the end of the book 😉

  • @lillii9119
    @lillii9119 Před 9 měsíci +158

    Short version: it creates a function called : that calls itself infinitely
    Also it calls 2 functions for each function which run at the same time so each step the number of functions is doubled

  • @demipy
    @demipy Před 9 měsíci +235

    I know this classic for over a decade now, but this was such a great video explaining it in detail! Thats the content i love this channel for. No BS straight to the point. ❤

  • @flipperiflop
    @flipperiflop Před 9 měsíci +75

    Great explanation! The expanded version really made it go from black magic to "oh it's that simple"

  • @tc2241
    @tc2241 Před 9 měsíci +51

    I love videos like these. Straight to the point, clearly explained with concise examples and demonstrations

  • @paulm3702
    @paulm3702 Před 9 měsíci +17

    Wow that's interesting! Love the breakdown of how that code actually worked

  • @alicefraser5799
    @alicefraser5799 Před 9 měsíci +8

    That's why I love your content EM. Learning so much from you. Keep them coming :)

  • @warchild3948
    @warchild3948 Před 9 měsíci +1

    " this is the initial call to fork me"
    How did you say that with a straight face.. Cuz I am rolling 😂 😂

  • @rogo7330
    @rogo7330 Před 9 měsíci +27

    Pipe is not the real issue here that causes program to explode. When you running a function, shell executes whatever command you gave it (and forks itself to execute external programs), but ampersand makes shell not to wait for a job to complete and then return but instead put that job in a background and let user to cleanup it with a wait command manualy.
    What is a job? Job is basically a group of processes with the same Process group ID (read manpage 7 credentials to learn more). Shell, when you launch several command with a pipe between them, first calls fork, then in a child assigns the same PGID as it's PID to itself, then it calls more forks which will inherit the same PGID (despite having new PIDs) with their stdins and stdouts connected one to another, and then each of that child executes whatever command you gave it to execute.
    Why PGID needed? To call kill command on the whole group of processes with the same PGID instead of calling kill to each one of them, or even lose control when initial child died and replaced itself with a new process with new PID. Since PGID is inherited by the child, and if child does not changes it explicitly by calling setpgid, you can just `kill -- -${child_pid}` (notice the minus before the process id and double-minus to make kill take that negative pid not as another option but as a pid value). This is how shell kills the whole pipe sequence at once.
    And yes, if child changes its PGID, its becoming immune to group kill (the game was rigged from the start), which does makes sence, but its hard to work around this if you really want to end all child and grandchildren processes, if at all possible. Try to write cron yourself, you will spend on it at least a hour or two of experimenting with what works and what not if you start from scratch knowing nothing about jobs, PGID, SID, what kill and wait calls allow you to do and what permissions you have to play with for changing processes credentials.

  • @YammoYammamoto
    @YammoYammamoto Před 8 měsíci +1

    The colon being a valid function name was what blew my mind. :D

  • @revx144
    @revx144 Před 6 měsíci +2

    I actually did this in my phone, good thing I did some buttons and it restarted. I was so scared but I was relieved when it restarted successfully.

  • @lancemarchetti8673
    @lancemarchetti8673 Před 8 měsíci +3

    Cool! I've created a jpeg bomb of 530 bytes that renders 4 billion pixels to the screen when opened. It freezes my laptop.. lol.
    I achieved this neat trick in Notepad ++ by accident when editing the Hex values in the dimensions sector of the code....

  • @alexanderaphonin7850
    @alexanderaphonin7850 Před 8 měsíci +2

    Great video, great explanation! Thank you for putting in the effort each time!

  • @VivekYadav-ds8oz
    @VivekYadav-ds8oz Před 9 měsíci +10

    Cant you do the same thing without the pipe? It feels like
    f(){f&}; f should do the same job. If you want to increase the forks exponentially, just have each function run two other ones like so:
    f(){f&; f&}; f

    • @ktheveg
      @ktheveg Před 8 měsíci +1

      Might be written with a pipe to make things neater or smaller

    • @prontomatias3081
      @prontomatias3081 Před 8 měsíci

      look at @rogo7330 comments

  • @nnutipa
    @nnutipa Před 9 měsíci +12

    Thanks. But the most interesting part with pipe and fork itself were not covered:( You said pipe is what actually creates a fork bomb, but why?

    • @patocarrasco6266
      @patocarrasco6266 Před 9 měsíci +8

      yeah, I also missed that. In my head, the second argument is waiting for the given input by the first one, so it should remain inactive. The only thing that I know is that the prior is wrong xD

    • @prontomatias3081
      @prontomatias3081 Před 8 měsíci

      look at @rogo7330 comments

    • @DerMigi
      @DerMigi Před 8 měsíci

      @@patocarrasco6266this is the exact same question I have. Does anyone have an answer?

    • @Turalcar
      @Turalcar Před 8 měsíci +2

      Piped processes are launched by bash in parallel

  • @ABaumstumpf
    @ABaumstumpf Před 9 měsíci +3

    You can do the same on Windows, but normally the system does not outright crash and you can recover from that (with taskmanager).

  • @comosaycomosah
    @comosaycomosah Před 9 měsíci

    dude idk how i havent came across your content yet but i dig it.

  • @matejhurta5626
    @matejhurta5626 Před 8 měsíci +2

    I kinda accidentally let it loose on the uni network and it crashed the network for a few days and I got failed :(

  • @yousefm.b4260
    @yousefm.b4260 Před 9 měsíci +1

    Wow!! this guy actually explained it very well.. I like it

  • @Apersonl0l
    @Apersonl0l Před 9 měsíci +2

    so it's basically how all my recursion functions go? :))))

  • @n8style
    @n8style Před 9 měsíci +1

    Fantastic explanation, quality video

  • @willmckeand
    @willmckeand Před 9 měsíci +1

    Pipe bomb would've been a great name for this

  • @HadToChangeMyName_YoutubeSucks

    I've seen it a number of times recently. Used to be kind of common, then it seemed to get old and I didn't see it so much, now it seems to be common again.

  • @loverboykimi
    @loverboykimi Před 9 měsíci +1

    Great education. Appreciated.

  • @macethorns1168
    @macethorns1168 Před 9 měsíci +4

    The only reason I was confused when I first saw this was that I didn't know you could use a colon as a function name. It makes much more sense as f(){f|f&};f
    It seems many modern 'nux systems default to limiting the number of forks a process can start now.

  • @okunamayanad
    @okunamayanad Před 9 měsíci

    i understood the fork bomb at 1:00 great title

  • @iskuben88
    @iskuben88 Před 9 měsíci

    great video! Brings back memories of crashing uni sun-ray clients ;)

  • @h3dzer
    @h3dzer Před 9 měsíci

    I love this new series

  • @BradenJohnYoung
    @BradenJohnYoung Před 9 měsíci

    Great explanation

  • @penguinpatroller
    @penguinpatroller Před 9 měsíci

    great video. concise and informative

  • @Evercreeper
    @Evercreeper Před 9 měsíci

    Excellent video

  • @jackflowt
    @jackflowt Před 8 měsíci

    Great explanation!

  • @SoreBrain
    @SoreBrain Před 9 měsíci +1

    It's tempting

  • @mrdzha9519
    @mrdzha9519 Před 8 měsíci

    thanks, it was interesting!

  • @chawrx3
    @chawrx3 Před 9 měsíci

    keep it up brother, have a nice day everyone

  • @prinnydadnope5768
    @prinnydadnope5768 Před 9 měsíci

    Very clear, thank you again

  • @davidserrano2091
    @davidserrano2091 Před 9 měsíci +1

    Time to run it on my system

  • @theoreticalaxolotl2804
    @theoreticalaxolotl2804 Před 3 měsíci

    My roommate will love this prank

  • @SomeGuyInSandy
    @SomeGuyInSandy Před 9 měsíci

    You have to love it!

  • @saptamdutta
    @saptamdutta Před 3 měsíci

    hey guys i want to know what other pranks have u done like this?

  • @takuya.yagami.
    @takuya.yagami. Před 9 měsíci

    Great video

  • @richarduton
    @richarduton Před 9 měsíci +1

    This isn't a fork bomb it's a picture of a cat.

  • @victorsubbiah6077
    @victorsubbiah6077 Před 8 měsíci

    shouldn't proliferating dummy processes just hang the system forever?
    why would it crash the system anyway?

  • @L-Coder
    @L-Coder Před 8 měsíci

    type the command 'gnome-terminal' (or any other command that opens a bash shell) in the end of the .bashrc file and save it and then see the magic when you open a terminal.😂 You might to do it in the .zshrc file depending on the type of shell you are using (bash or zsh = Bourne Again Shell or Z shell).

  • @Baltr
    @Baltr Před 9 měsíci +1

    are you able to pipe it multiple times inside the same command to make it crash the system faster?

    • @alexholker1309
      @alexholker1309 Před 8 měsíci

      I don't think it would make a meaningful difference. You'd crash the system in fewer generations, but it would take longer to resolve each instance of the process.

  • @joey3070
    @joey3070 Před 8 měsíci

    Delightful

  • @connorallen162
    @connorallen162 Před 9 měsíci +1

    Oh THAT's why you don't want everything to be run by the root user

  • @cepi24
    @cepi24 Před 8 měsíci

    How did you replace semicolons with text?

  • @mynameismynameis666
    @mynameismynameis666 Před 9 měsíci

    forbidden emojis are teh most powahful

  • @cni_povkit
    @cni_povkit Před 9 měsíci +5

    "Fork me". That's what she said.

  • @siri-v18-non-intelligence-b-2

    do you need the &?

  • @bashisobsolete.pythonismyn6321

    when you use fish shell for several good reasons and the "expert professionals" roll their eyes at you.

  • @EnglishRain
    @EnglishRain Před 9 měsíci

    Nice didn't know you could limit number of processes for a user

  • @GeorgeAlexanderTrebek
    @GeorgeAlexanderTrebek Před 9 měsíci

    Spoon Nuke next plz

  • @tobiashelbing1233
    @tobiashelbing1233 Před 8 měsíci

    Great!

  • @sam_ldm
    @sam_ldm Před 8 měsíci

    what if i write this in my bashrc ?

  • @m3sm4r2010
    @m3sm4r2010 Před 9 měsíci +1

    fyi: i have tested this code on my android phone and it works 😂

  • @DUMBDUDEGAMER
    @DUMBDUDEGAMER Před 9 měsíci

    I wonder how this does on WSL

  • @KangJangkrik
    @KangJangkrik Před 9 měsíci +1

    Ran this on production server for fun, bos didn't seem really enjoy it

  • @Drogobo
    @Drogobo Před 9 měsíci

    what do you mean by "friends on linux"?

  • @iangraham6730
    @iangraham6730 Před 9 měsíci

    Noice 👌 Thanks for sharing 👍

  • @louisdrouard9211
    @louisdrouard9211 Před 8 měsíci

    Does not :(){:&;:&} do the same thing (without pipe) ?

  • @devviz
    @devviz Před 9 měsíci

    if you set the video playing speed fast enough you can almost hear "fork me" to another very similar term

  • @hkkis7836
    @hkkis7836 Před 9 měsíci

    Could you please show your hotkeys for the editor?

  • @Cassandra_Johnson
    @Cassandra_Johnson Před 8 měsíci

    ah yes, for(;;){fork();} good times...

  • @repairstudio4940
    @repairstudio4940 Před 9 měsíci

    Awesomeness 🎉

  • @mikerope5785
    @mikerope5785 Před 9 měsíci

    i was sad when browsers started detecting and halting infinite javascript recursions

  • @clockblower6414
    @clockblower6414 Před 9 měsíci +1

    You can fix a lot of problems in Linux by running sudo dd if=/dev/null of=/dev/sda

  • @HiddenTreasure-xj7yt
    @HiddenTreasure-xj7yt Před 8 měsíci

    I made a batch bomb in the 90s.

  • @shahfaisal3923
    @shahfaisal3923 Před 9 měsíci

    you won a subscriber

  • @RlainTheFirst
    @RlainTheFirst Před 9 měsíci

    What about :(){:&;:&);:
    Also exponential or linear?

    • @patfre
      @patfre Před 9 měsíci

      It will do the same as at 4:25

  • @garrysingh4484
    @garrysingh4484 Před 9 měsíci

    Awesome 👍

  • @K_Forss
    @K_Forss Před 8 měsíci

    I remember my first attempt at a fork bomb, it was perhaps 15 years ago in high school and I wrote it in C, it didn't really work too well, I probably had some more advanced scheduler than I thought and while it slowed down my computer I was able to still kill the process. But I added a small malloc (about 4k if I remember correctly) in the loop ant it totally freezed my computer in seconds. Fun times
    Edit: If I had known more when I was young I'd probably done a mix of forking and daemonizing to try to hit it harder

  • @docker31c
    @docker31c Před 8 měsíci +1

    So i got trolled in a stackoverflow question...

  • @danielbaker1248
    @danielbaker1248 Před 5 měsíci

    Fork me, this is interesting!(:

  • @ai-spacedestructor
    @ai-spacedestructor Před 9 měsíci

    the VM setup is questional, you said you had to restart your system and the VM. sounds like you gave it too much pc resources or using some vm i never heard about before which doesnt asign a limited number of resources in order to run it.

    • @EngineerMan
      @EngineerMan  Před 9 měsíci

      I only had to restart the VM, not my whole system.

    • @ai-spacedestructor
      @ai-spacedestructor Před 9 měsíci

      @@EngineerMan you did say in the video something about your vm and the whole system after it crashed. might have misunderstood but to me it did sound like you said you had to restart the whole system.

  • @rebel478
    @rebel478 Před 9 měsíci

    Oh no I'm wrong, your right eyebrow is still always higher than the other one

  • @adrianbool4568
    @adrianbool4568 Před 9 měsíci

    Fork me, that was a good video! ;-)

  • @chromosome24
    @chromosome24 Před 8 měsíci +1

    I prefer the spoon bomb

  • @philipzhu5194
    @philipzhu5194 Před 9 měsíci

    What happens if instead of piping, you start 2 background processes each time? like :(){:&:&};:

  • @cmoor8616
    @cmoor8616 Před 8 měsíci

    Reminds me of the prankster batch files for cmd.exe I used to make during my windows years. The simplest I managed to create (DO NOT RUN THIS)
    %0 >> %0
    %0
    With an empty line after,

  • @kiyasuihito
    @kiyasuihito Před 8 měsíci

    Hilarious 🎉

  • @iuhere
    @iuhere Před 9 měsíci

    stress testing without a stop 🛑 button 😅

  • @Angelinajolieshorts
    @Angelinajolieshorts Před 6 měsíci

    Can you please tecah us these skills. Please 🙏🙏🙏

  • @The_Pariah
    @The_Pariah Před 9 měsíci

    So you watched Dave's Garage and made your own fork bomb video. K.

  • @florianmattausch8563
    @florianmattausch8563 Před 9 měsíci

    It is Not exponential. it is just times 2.

    • @patfre
      @patfre Před 9 měsíci +5

      Exponential is repeated multiplication. So it is exponential because it is multiplying by 2 over and over

  • @Alex-eq1cs
    @Alex-eq1cs Před 4 měsíci

    Systemd solution this.... Límite del 30% de procesos máximos del sistema.

  • @enty-3035
    @enty-3035 Před 6 měsíci

    %0|%0 is the windows version it is fun

  • @colonthree
    @colonthree Před 8 měsíci

    Cat :3

  • @googleuser4720
    @googleuser4720 Před 8 měsíci

    Is your name a Daniel?

  • @rebel478
    @rebel478 Před 9 měsíci

    How is your eyebrow straight again

  • @Pcoxproductions
    @Pcoxproductions Před měsícem

    There are no shortcuts

  • @cruz1ale
    @cruz1ale Před 8 měsíci

    fork bombs are for dorks

  • @MrGeekGamer
    @MrGeekGamer Před 9 měsíci

    "There is ways"
    There are.

  • @mikebresnahan8682
    @mikebresnahan8682 Před 8 měsíci

    Being an old fart, I have to point out that the fork bomb existed prior to linux, albeit with the same shell syntax you describe. en.wikipedia.org/wiki/Fork_bomb

  • @darienverdugo290
    @darienverdugo290 Před 8 měsíci

    What if i run it on an instance 🥸

  • @headlights-go-up
    @headlights-go-up Před 9 měsíci

    great explanation!