Re:Acme.sh runs arbitrary commands from a remote server
by electroly on Friday June 09, 2023 @06:41PM
(#36265271)
This is a Chinese CA, I don't think there was a danger of any of us using it, and none of them are here to receive this criticism. Most of your complaints are about the shell script that the Chinese CA is injecting and that's... not really the problem. This doesn't get better if they had injected a better script. The people who wrote acme.sh, though, which has the security vulnerability that the Chinese CA exploited, might have some soul-searching to do.
[ Parent
| on HN ]
There are no comments on this comment yet.