Hacker News Reader

tl;dr: This software immediately recognized Shellshock for what it was, modified live processes to protect itself, then wrote a patch and re-compiled bash in a few minutes... all with a single malicious request.

This sounds like science fiction. I love it.

View on HN

I have to be honest; at first I genuinely thought it was science fiction. It sounded like a William Gibson novel.

Note that it disabled the exploit instead of fixing it, which still is a remarkable feat. I wonder if that could be exploited e.g. by exposing an light exploit from security feature you trick the software to disable a security feature that was stopping a more dangerous exploit, a la The Prefect by Alastair Reynolds.

Reply on news.ycombinator.com