3 ms·
The man who found the web's 'most dangerous' Internet security bug
- userbinator 12y agoHe said he found the bug after reflecting on an earlier bug he found in Bash a few months ago. The majority of the article seems to be focusing on the effects after it was found, but I would've liked more info on what lead him to discover the bug; was he reading Bash source code looking for vulnerabilities, or something more mundane? My current hypothesis is trying to debug a shell script that put '() {' in an environment variable followed by some commands.