Hacker News new | past | comments | ask | show | jobs | submit login

> Requires nothing but Apache running, minimizes attack surface area

Shellshock comes to mind as a counter point.




It's only a concern if the CGI script is written in shell or uses the `system()` function.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: