Hacker News Reader

Wasn’t “Shellshock” the name for a very severe security bug? When I read “shell-shockingly good Kubernetes”, at first, I thought this was an article warning about container security.

View on HN

I believe originally it was a name for PTSD, that's an even more curious association. In case it wasn't obvious, tortoise-related puns can be taken too far :)

Yes: shell-shock is never good, which makes "shell-shockingly good" a poor turn of phrase even in the context of terrapins.

Yes. It was a bug in bash -- the Bourne again shell -- that permitted the execution of arbitrary code by embedding a function definition into environment variables. It was a Big Deal because it was remotely exploitable in systems that set environment variables according to user input before executing the shell -- the most severe was probably the Apache HTTP Server's CGI handler, which sets environment variables from HTTP header data.

I had the same initial reaction, though. "Kubernetes? Shellshock? Oh noes!"

Reply on news.ycombinator.com