Hacker News new | past | comments | ask | show | jobs | submit login

Wasn’t “Shellshock” the name for a very severe security bug? When I read “shell-shockingly good Kubernetes”, at first, I thought this was an article warning about container security.



I believe originally it was a name for PTSD, that's an even more curious association. In case it wasn't obvious, tortoise-related puns can be taken too far :)


Yes: shell-shock is never good, which makes "shell-shockingly good" a poor turn of phrase even in the context of terrapins.


Yes. It was a bug in bash -- the Bourne again shell -- that permitted the execution of arbitrary code by embedding a function definition into environment variables. It was a Big Deal because it was remotely exploitable in systems that set environment variables according to user input before executing the shell -- the most severe was probably the Apache HTTP Server's CGI handler, which sets environment variables from HTTP header data.

I had the same initial reaction, though. "Kubernetes? Shellshock? Oh noes!"




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: