Hacker News Reader

I would have thought the best way to do secure shell scripting is to use a non-shell language, e.g. Python or Go.

It seems most shell vulnerabilities (including shellshock) fundamentally come from the awful and dangerous syntax.

Fundamentally, it's not an issue of syntax. The problem is that the way commodity systems are set up, the capabilities of a script or program come from the environment in which it is run. There is no way that a user can easily tell what a script will do, even if it isn't malicious or doesn't have a code injection vulnerability.

Reply on news.ycombinator.com