3 ms·
Dang. Unfortunately I am not vulnerable, and I use default ohmyzsh. This is a neat bug, though. Lots of package managers have similar problems, and I would not
by ejcx 10y ago
Dang. Unfortunately I am not vulnerable, and I use default ohmyzsh.
This is a neat bug, though. Lots of package managers have similar problems, and I would not be surprised if there's a lot of git/shell/environment problems left to find.
- Ajedi32 10y agoWhy is it unfortunate that you're not vulnerable? Isn't that a good thing?
- caust1c 10y agoHe's an applications security researcher. That stuff is fun for him.
- caust1c 10y agoOh god why. Use https://github.com/sorin-ionescu/prezto https://github.com/sorin-ionescu/prezto
- vortico 10y agoAre you not going to give a reason?
- caust1c 10y agoYeah I guess it was presented without a reason. Code quality is pretty much the reason though. The oh-my-zsh maintainer himself even wrote a post once upon a time about how not to run an OSS project. Prezto forked the project and cleaned up everything quite nicely a long time ago.
- gepoch 10y agolol I'm using prezto, and I was pwn'd! Looks like OMZ is doing things nicely where prezto fails :)
- deleted 10y ago[deleted]