[quakershake]

Anyone who bashes open source code for bugs is an idiot. Maybe the "community" should start auditing code instead of blogging and tweeting about how awful things are. This functionality has been around for so long it is generational.

+1 to the person(s) responsible for finding this.

Everyone complaining should stfu

[nailer]

I actually think it's fine to have an opinion on any piece of software.

However weev is completely correct in telling people that shell environment variables were an obviously bad place for arbitrary data set by people on the internet back in the 90s. The shell wasn't designed for that, it's known to be insecure.

HNs defence of Apache doing silly things seems to be more love of Apache and lack of knowledge of Unix fundamentals than hate of free tools.

[quakershake]

Agreed. Misuse is a problem. However sometimes being too flexible opens itself up to unintended misuse.

It seems as if though foss is so reliable that people start to act entitled when shit hits the fan. Software has never been problem free and never will.

I'm just glad I haven't seen a libreBash or some other lame fork instead of just adding more eyes to the existing functioning project.

[hiphopyo]

Isn't Zsh basically libreBash though?

[nailer]

Bash is already libre - see http://www.gnu.org/software/bash/

[quakershake]

No. As far I as I know it is not a fork. Forking b/c of an overreaction due to a "bug" that was patched as soon as it was reported is asinine.

[Rapzid]

Apparently shellshock and heartbleed were both found by reviewing code...