News for hackers. Stuff that matters.
Re:Not a bash bug by meelooo on Saturday September 27, 2014 @08:16PM (#8378549)
no, the problem is that you can treat any kind of text data as an executable. You can try to fix this by adding mountains of complexities and excuses but would still be true: as soon as you have text enter the equation you need to escape/encode/decode and parse. Every time you do that you add more complexity than is needed, and also you add many ways to abuse the programs and create "interesting bugs".

There are no comments on this comment yet.