4 ms·
It's ok to be wrong; it's not ok to change your original writeup and continue to insist that you have been right all along I removed the section about the bash
by mmsc 3y ago
It's ok to be wrong; it's not ok to change your original writeup and continue to insist that you have been right all along
I removed the section about the bash restriction (which was not particularly important), but the content of the post did not change: https://github.com/MegaManSec/JoshuaHu/commit/11cd746a0efb0279511238cc92d9c4d6eef191f6 https://github.com/MegaManSec/JoshuaHu/commit/11cd746a0efb02...
The failure is instead a systemic one that allowed an ineffective and insecure configuration to be applied to a system. Some process (or maybe no defined process) 1) led "the administrator" of the system in question to do it and 2) didn't provide any verification or review of the configuration change.
Almost as if the post is therefore detailing _how_ it is an ineffective and an insecure configuration.