News for hackers. Stuff that matters.
Re:CVE-2017-16544: A Busybox autocompletion vulnerability by zelivans on Monday November 20, 2017 @10:43AM (#15740669)
Hi, I'm the author of the article. To stress your point, there really are so many embedded devices using Busybox, and most of them were never designed to be updated (or nobody cares enough to update them).

Also I never got to fuzzing networking applets (wget is the most obvious) but this is definitely something I plan to look into, if no one did that before, there are definitely vulnerabilities there too.

Re:CVE-2017-16544: A Busybox autocompletion vulnerability by ericfrederich on Monday November 20, 2017 @10:57AM (#15740797)
When you ssh to your device are you not running Busybox shell on the device? I don't understand why this is less of a problem?
Re:CVE-2017-16544: A Busybox autocompletion vulnerability by zelivans on Monday November 20, 2017 @11:15AM (#15740972)
Yes absolutely. Whew. Updated my comment accordingly, thanks.