undefined | Better HN

0 pointsJoshTriplett11y ago0 comments

Except that most environments already filter out attempts to control PATH, LD_LIBRARY_PATH, and similar; they don't filter out "git".

0 comments

notacoward11y ago

I agree. In the next few months, we'll probably be finding out about some of the cases where neither existing sanitization nor the half-fix for this problem was sufficient to prevent exploits in this family. :(

j / k navigate · click thread line to collapse

0 pointsJoshTriplett11y ago0 comments

Except that most environments already filter out attempts to control PATH, LD_LIBRARY_PATH, and similar; they don't filter out "git".

0 comments

notacoward11y ago

I agree. In the next few months, we'll probably be finding out about some of the cases where neither existing sanitization nor the half-fix for this problem was sufficient to prevent exploits in this family. :(

j / k navigate · click thread line to collapse