[Discuss] Shellshock

Richard Pieri richard.pieri at gmail.com
Wed Oct 1 11:07:05 EDT 2014


On 9/30/2014 10:59 PM, Bill Ricker wrote:
>    Code injection in a critical gut component like /bin/sh ...
> implemented with a link. Oops !

And Lennart wonders why some of us hate his code.


> Note that Multiple additional BASH security bugs have been found
> and/or fixed since they started looking harder in the last week.

Which is not a bad thing as long as the people looking actually
understand what they are looking at and what they are looking for. It's
not so much the quantity of eyes as the quality of those eyes.

-- 
Rich P.



More information about the Discuss mailing list