Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
graylights
on Sept 24, 2014
|
parent
|
context
|
favorite
| on:
CVE-2014-6271: Remote code execution through bash
Much easier to implement a custom captive shell (default login shell for user) then to mess with the crypto system.
scintill76
on Sept 24, 2014
[–]
Maybe. Actually, it looks like Github is using libssh, which is along the lines of what I was thinking, without having to mess with crypto too much, as you say.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
