4 ms·
It's just an example, and I chose the example precisely because it can't be used in modern times, and I explained that the example wouldn't work. Why should I o
by lutusp 12y ago
It's just an example, and I chose the example precisely because it can't be used in modern times, and I explained that the example wouldn't work. Why should I offer working examples for black-hat hackers in a public forum?
It graphically shows the vulnerability produced by Shellshock, but without offering a real working example for the script kiddies to emulate.
On this Cloudflare page --
https://blog.cloudflare.com/inside-shellshock/ https://blog.cloudflare.com/inside-shellshock/
-- that explains the Shellshock bug, they use the same example I gave -- reading /etc/passwd. And for the same reason -- it's an example of a vulnerability, but won't give black-hats any useful information. They don't explain that this won't actually produce anything useful, but I do.
And for this I get downvoted? Terrific.