oss-sec mailing list archives

Re: Who named shellshock?


From: Ed Prevost <me () edwardprevost info>
Date: Mon, 06 Oct 2014 15:17:27 -0700

On 10/6/2014 3:12 PM, Larry W. Cashdollar wrote:
I thought it was https://twitter.com/ErrataRob

On Oct 6, 2014, at 5:04 PM, Michal Zalewski <lcamtuf () coredump cx> wrote:

I don't think it happened on Twitter - using advanced search with date
ranges, I don't see any mentions that would predate this article,
which already seems to be using the term:

http://www.csoonline.com/article/2687265/application-security/remote-exploit-in-bash-cve-2014-6271.html

It's odd that an article posted at 8 AM on Sept 24 would have any idea
of how the bug is already being called by the security community,
especially ahead of any Twitter buzz. But both Stephane and Florian
implied that some of the pre-notified parties apparently started
leaking details to the press and were getting ready to make a splash
the moment it goes public, so maybe that's the explanation.

/mz


I'm still calling it BASHINGA! :0)


Current thread: