Securing Internet-Critical Software: How We Could Have Backdoored Bash

(May 2026) TL;DR: an email address like atouch${IFS}/tmp/[email protected] gave any registered user code execution on its backend. From there, we made our account a superuser, impersonated Bash’s maintainer, and confirmed we could add an SSH key with push access to the upstream Bash repository. An unpatched kernel gave us root... Weiterlesen: Securing Internet-Critical Software: How We Could Have Backdoored Bash