#308 shellshocked
Closed: Pushed None Opened 6 years ago by mattdm.

What the badge should be granted for:

Helping build, test, document, or push the fix for CVE-2014-6271 (and followups).

Badge description: "You helped us bash the shellshocked bug."

Anything else we need to know:

Like: https://badges.fedoraproject.org/badge/heartbleed-buster


Definitely a +1 from me. Important, and would be a good sister badge to heardbleed-buster, like you mentioned.

Also, love the pun in the description. ;)

Definitely a +1 from me. Important, and would be a good sister badge to heardbleed-buster, like you mentioned.

Also, love the pun in the description. ;)

Would it be an idea to include people that deployed fixes in Fedora Infra? (for which I'll nominate myself)

Would it be an idea to include people that deployed fixes in Fedora Infra? (for which I'll nominate myself)

Replying to [comment:2 puiterwijk]:

Would it be an idea to include people that deployed fixes in Fedora Infra? (for which I'll nominate myself)

Yes. :)

Replying to [comment:2 puiterwijk]:

Would it be an idea to include people that deployed fixes in Fedora Infra? (for which I'll nominate myself)

Yes. :)

+1 from me.

I assume people who have tested the Bodhi update (and checked other shells for similar issues) qualify?

+1 from me.

I assume people who have tested the Bodhi update (and checked other shells for similar issues) qualify?

Sparks and jsmith should both be on the list for this badge :)

Sparks and jsmith should both be on the list for this badge :)

Oh looky, a new badge.

I'm happy to do the pushing if you folks do the build, testing, and documenting. =)

Oh looky, a new badge.

I'm happy to do the pushing if you folks do the build, testing, and documenting. =)

I sent out emails! I'm helping!

I sent out emails! I'm helping!

I coordinated with Patrick on applying things to infra and helped answer user questions in #fedora. ;)

I coordinated with Patrick on applying things to infra and helped answer user questions in #fedora. ;)

I'd be happy to help out with art- does anyone have concepts for the design?

I'd be happy to help out with art- does anyone have concepts for the design?

Horrible trademark violation, or parody: Mario Kart blue shell getting struck by lightning.

Horrible trademark violation, or parody: Mario Kart blue shell getting struck by lightning.

I deployed fixes on fedorashell (an internal shell server some of us on the fed-eng team use as an IRC proxy), and talked with Patrick some about this on IRC. I don't know if this is enough but I want a badge, so I am just throwing that out there and being hopeful. :P

I deployed fixes on fedorashell (an internal shell server some of us on the fed-eng team use as an IRC proxy), and talked with Patrick some about this on IRC. I don't know if this is enough but I want a badge, so I am just throwing that out there and being hopeful. :P

[[Image(shellshock.png)]]

Updated with amsharmas suggestion

Feedback welcome

[[Image(shellshock.png)]]

Updated with amsharmas suggestion

Feedback welcome

Hey Marie,

Nice work .. May I suggest you to put a $ symbol instead of a turtle or can we have $ symbol on the middle white area of turtle body.
$ is important because in fedora $ represents shell prompt and this vulnerability is found in shell/bash i.e. why it is called as shellshock :)
Hope it helps.

don't forget to award me this badge ;)

Hey Marie,

Nice work .. May I suggest you to put a $ symbol instead of a turtle or can we have $ symbol on the middle white area of turtle body.
$ is important because in fedora $ represents shell prompt and this vulnerability is found in shell/bash i.e. why it is called as shellshock :)
Hope it helps.

don't forget to award me this badge ;)

Replying to [comment:8 kevin]:

I coordinated with Patrick on applying things to infra and helped answer user questions in #fedora. ;)

On the same coordinating topic, I nominate smooge as well.

Replying to [comment:8 kevin]:

I coordinated with Patrick on applying things to infra and helped answer user questions in #fedora. ;)

On the same coordinating topic, I nominate smooge as well.

Replying to [comment:12 riecatnor]:

[[Image(shellshock.png)]]

Feedback welcome

Updated with amsharmas suggestion

Replying to [comment:12 riecatnor]:

[[Image(shellshock.png)]]

Feedback welcome

Updated with amsharmas suggestion

Replying to [comment:15 riecatnor]:

Replying to [comment:12 riecatnor]:

Feedback welcome

Updated with amsharmas suggestion

I like it!

Replying to [comment:15 riecatnor]:

Replying to [comment:12 riecatnor]:

Feedback welcome

Updated with amsharmas suggestion

I like it!

Replying to [comment:15 riecatnor]:

Replying to [comment:12 riecatnor]:

[[Image(shellshock.png)]]

Feedback welcome

Updated with amsharmas suggestion
[[Image(shellshock_v2.png)]]
Version 2 with suggestions from gnokii

Replying to [comment:15 riecatnor]:

Replying to [comment:12 riecatnor]:

[[Image(shellshock.png)]]

Feedback welcome

Updated with amsharmas suggestion
[[Image(shellshock_v2.png)]]
Version 2 with suggestions from gnokii

I gave karma to a couple updates. Oddshocks told me indicate that here :)

I gave karma to a couple updates. Oddshocks told me indicate that here :)

I guess the easiest will be to take the people nominated here + the one that gave karma in bodhi.

I guess the easiest will be to take the people nominated here + the one that gave karma in bodhi.

Replying to [comment:19 pingou]:

I guess the easiest will be to take the people nominated here + the one that gave karma in bodhi.

Yeah. I don't think we need separate nominations for bodhi karma.

Don't forget masta (jon disnard) and dgilmore from releng. And ryanlerch for magazine articles.

Replying to [comment:19 pingou]:

I guess the easiest will be to take the people nominated here + the one that gave karma in bodhi.

Yeah. I don't think we need separate nominations for bodhi karma.

Don't forget masta (jon disnard) and dgilmore from releng. And ryanlerch for magazine articles.

sysadmin-badges can set this up once design team has finalized the artwork.

sysadmin-badges can set this up once design team has finalized the artwork.

Thanks Marie :). You are awesome.
I gave karma in bodhi, tested, posted blog, gave suggestion for badge design.

Thanks Marie :). You are awesome.
I gave karma in bodhi, tested, posted blog, gave suggestion for badge design.

Gnokii and I agree on shellshock_v6.png

Gnokii and I agree on shellshock_v6.png

All pushed out! If I missed anyone, please comment here and we can fix it later.

All pushed out! If I missed anyone, please comment here and we can fix it later.

Replying to [comment:25 ralph]:

All pushed out! If I missed anyone, please comment here and we can fix it later.
RJ, you missed me... I gave karma in bodhi, tested, posted blog, gave suggestion for badge design.

Replying to [comment:25 ralph]:

All pushed out! If I missed anyone, please comment here and we can fix it later.
RJ, you missed me... I gave karma in bodhi, tested, posted blog, gave suggestion for badge design.

amsharma,
If [https://badges.fedoraproject.org/user/amsharma this is] your profile then I can see you have been already awarded this badge :)

amsharma,
If [https://badges.fedoraproject.org/user/amsharma this is] your profile then I can see you have been already awarded this badge :)

Replying to [comment:27 pnemade]:

amsharma,
If [https://badges.fedoraproject.org/user/amsharma this is] your profile then I can see you have been already awarded this badge :)
Oh yeah Parag, thanks :)

Replying to [comment:27 pnemade]:

amsharma,
If [https://badges.fedoraproject.org/user/amsharma this is] your profile then I can see you have been already awarded this badge :)
Oh yeah Parag, thanks :)

when its enough to make a design suggestion to earn it or just give a little bit of karma, then I really must question why the people who did the badge didnt get it?

when its enough to make a design suggestion to earn it or just give a little bit of karma, then I really must question why the people who did the badge didnt get it?

Testing and adding a little bit of karma when there's an urgent update is no small thing.

If someone just made a badge design suggestion and didn't help with the rest that probably doesn't count, but in a quick skim I don't see that as happening. And there are already separate badges for making badges, right? (I don't think it makes sense for the badge makers to automatically get all of the badges they make, does it?)

Testing and adding a little bit of karma when there's an urgent update is no small thing.

If someone just made a badge design suggestion and didn't help with the rest that probably doesn't count, but in a quick skim I don't see that as happening. And there are already separate badges for making badges, right? (I don't think it makes sense for the badge makers to automatically get all of the badges they make, does it?)

well, first there are no badges for artists implemented yet and second for adding karma also badges are given ;)
So when artwork contribution doesnt count, because there might be a badge someday, why counts karma then doubled? Btw. for blog postings are also badges awarded.

So when then for all the same rights ;)

well, first there are no badges for artists implemented yet and second for adding karma also badges are given ;)
So when artwork contribution doesnt count, because there might be a badge someday, why counts karma then doubled? Btw. for blog postings are also badges awarded.

So when then for all the same rights ;)

Replying to [comment:31 gnokii]:

well, first there are no badges for artists implemented yet

Oooh, that seems like the problem right there. :)

So when artwork contribution doesnt count, because there might be a badge someday, why counts karma then doubled? Btw. for blog postings are also badges awarded.

So when then for all the same rights ;)

The badge is supposed to be a fun, small reward for helping in the actual crisis response. Making a badge is awesome, but is not really part of that response. Let's not dilute it!

Replying to [comment:31 gnokii]:

well, first there are no badges for artists implemented yet

Oooh, that seems like the problem right there. :)

So when artwork contribution doesnt count, because there might be a badge someday, why counts karma then doubled? Btw. for blog postings are also badges awarded.

So when then for all the same rights ;)

The badge is supposed to be a fun, small reward for helping in the actual crisis response. Making a badge is awesome, but is not really part of that response. Let's not dilute it!

I have to agree with gnokii on this. Within 24 hours of this ticket being made I had uploaded artwork. If karma, testing, blog posting and coordination are counted as 'crisis response'(and they are!) then why not design?

I am not suggesting that badge artists should receive every badge they design- but in this instance I would say that the artwork that was made for the shellshock crisis is clearly a concentration... not a dilution.

I have to agree with gnokii on this. Within 24 hours of this ticket being made I had uploaded artwork. If karma, testing, blog posting and coordination are counted as 'crisis response'(and they are!) then why not design?

I am not suggesting that badge artists should receive every badge they design- but in this instance I would say that the artwork that was made for the shellshock crisis is clearly a concentration... not a dilution.

I do appreciate the fast response -- that did make this all more fun, and that's what this is supposed to be. Also, it's supposed to be a "we're all part of the awesome team" thing, not exclusionary. So, okay, sure, I'm convinced.

I do appreciate the fast response -- that did make this all more fun, and that's what this is supposed to be. Also, it's supposed to be a "we're all part of the awesome team" thing, not exclusionary. So, okay, sure, I'm convinced.

@Matt you made my day and made me smile again

@Matt you made my day and made me smile again

Huzaifa Sidhpurwalla and Florian Weimer were primary coordinators for the shellshock flaw and fixes (google 'huzaifa shellshock' or 'florian weimer shellshock' without the quotes) in RHEL as well as Fedora. I believe they qualify for this badge as well. FAS names: huzaifas, fweimer

Huzaifa Sidhpurwalla and Florian Weimer were primary coordinators for the shellshock flaw and fixes (google 'huzaifa shellshock' or 'florian weimer shellshock' without the quotes) in RHEL as well as Fedora. I believe they qualify for this badge as well. FAS names: huzaifas, fweimer

Thanks siddhesh. Done!

Thanks siddhesh. Done!

@threebean, please sub in shellshock_v6.2.png when you have a chance. though the file gnokii uploaded looks right, it looks bigger on the site. I exported it again so this one should work.

@threebean, please sub in shellshock_v6.2.png when you have a chance. though the file gnokii uploaded looks right, it looks bigger on the site. I exported it again so this one should work.

Login to comment on this ticket.

Metadata
Attachments 8
Attached 6 years ago View Comment
Attached 6 years ago View Comment
Attached 6 years ago View Comment
Attached 6 years ago View Comment
Attached 6 years ago View Comment
Attached 6 years ago View Comment
Attached 5 years ago View Comment
Attached 5 years ago View Comment