2 ms·
tl;dr: This software immediately recognized Shellshock for what it was, modified live processes to protect itself, then wrote a patch and re-compiled bash in a
by mabbo 12y ago
tl;dr: This software immediately recognized Shellshock for what it was, modified live processes to protect itself, then wrote a patch and re-compiled bash in a few minutes... all with a single malicious request.
This sounds like science fiction. I love it.
- junto 12y agoI have to be honest; at first I genuinely thought it was science fiction. It sounded like a William Gibson novel.
- wmt 12y agoNote that it disabled the exploit instead of fixing it, which still is a remarkable feat. I wonder if that could be exploited e.g. by exposing an light exploit from security feature you trick the software to disable a security feature that was stopping a more dangerous exploit, a la The Prefect by Alastair Reynolds.