:(){ :|: };: is a user on infosec.exchange. You can follow them or interact with them if you have an account anywhere in the fediverse.
If you don't, you can sign up here.
Systemd has a bug where user names starting with a digit cause the user daemon to run with root privileges. According to the creator of systemd, this is not a bug and everything is fine. The reason everything is fine is because names like this, which are explicitly permitted by the base standards, are forbidden and tools shouldn't allow creating these names, so it's a bug in the tools for permitting names permitted by the standard.
Fsck systemd.
@jgoguen How could a filesystem check help here? Can't find anything about this exploit in man fsck.
@astralboy There's a one-letter replacement in "fsck" that would require a language warning on this. It's also what people generally say when they have to run fsck ;-)
