> Vulnerabilities like ShellShock simply vanish. What? No, they don't! ShellShock was about executing unintended code in a bash process where you control an

> Vulnerabilities like ShellShock simply vanish. What? No, they don't! ShellShock was about executing unintended code in a bash process where you control an environment variable but not stdin. If you control stdin, there's no need to sneak a command into an environment variable: you can just type it into the shell. Apart from this, the article makes no argument for removing SSH: it only argues for restricting access to privileged userids. That is to say, the standard best practice for decades. Root should be reserved for special situations, not used by default.