shellshocked #308
Labels
No labels
AW: approved
AW: needed
AW: needs improvement
C: community
C: content
C: development
C: event
Closed As
declined
Closed As
duplicate
Closed As
fixed
Closed As
needs info
Closed As
not yet possible
Closed As
pushed
Closed As
stale
C: miscellaneous
C: quality
D: easy
D: hard
D: intermediate
good first issue
outreachy-2023
Priority
critical (next week)
Priority
minor (3-4 weeks)
Priority
no deadline
Priority
normal (1-2 weeks)
S: blocked
S: needs rules
S: ready to push
S: request for resources
S: review
T: badge request
T: bug
T: docs
T: feature request
Backlog Status
Needs Review
Backlog Status
Ready
chore
documentation
points
01
points
02
points
03
points
05
points
08
points
13
Priority
High
Priority
Low
Priority
Medium
Sprint Status
Blocked
Sprint Status
Done
Sprint Status
In Progress
Sprint Status
Review
Sprint Status
To Do
Technical Debt
Work Item
Bug
Work Item
Epic
Work Item
Spike
Work Item
Task
Work Item
User Story
No milestone
No project
No assignees
16 participants
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
apps/badges-assets#308
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
What the badge should be granted for:
Helping build, test, document, or push the fix for CVE-2014-6271 (and followups).
Badge description: "You helped us bash the shellshocked bug."
Anything else we need to know:
Like: https://badges.fedoraproject.org/badge/heartbleed-buster
Definitely a +1 from me. Important, and would be a good sister badge to heardbleed-buster, like you mentioned.
Also, love the pun in the description. ;)
Definitely a +1 from me. Important, and would be a good sister badge to heardbleed-buster, like you mentioned.
Also, love the pun in the description. ;)
Would it be an idea to include people that deployed fixes in Fedora Infra? (for which I'll nominate myself)
Would it be an idea to include people that deployed fixes in Fedora Infra? (for which I'll nominate myself)
Replying to [comment:2 puiterwijk]:
Yes. :)
Replying to [comment:2 puiterwijk]:
Yes. :)
+1 from me.
I assume people who have tested the Bodhi update (and checked other shells for similar issues) qualify?
+1 from me.
I assume people who have tested the Bodhi update (and checked other shells for similar issues) qualify?
Sparks and jsmith should both be on the list for this badge :)
Sparks and jsmith should both be on the list for this badge :)
Oh looky, a new badge.
I'm happy to do the pushing if you folks do the build, testing, and documenting. =)
Oh looky, a new badge.
I'm happy to do the pushing if you folks do the build, testing, and documenting. =)
I sent out emails! I'm helping!
I sent out emails! I'm helping!
I coordinated with Patrick on applying things to infra and helped answer user questions in #fedora. ;)
I coordinated with Patrick on applying things to infra and helped answer user questions in #fedora. ;)
I'd be happy to help out with art- does anyone have concepts for the design?
I'd be happy to help out with art- does anyone have concepts for the design?
Horrible trademark violation, or parody: Mario Kart blue shell getting struck by lightning.
Horrible trademark violation, or parody: Mario Kart blue shell getting struck by lightning.
I deployed fixes on fedorashell (an internal shell server some of us on the fed-eng team use as an IRC proxy), and talked with Patrick some about this on IRC. I don't know if this is enough but I want a badge, so I am just throwing that out there and being hopeful. :P
I deployed fixes on fedorashell (an internal shell server some of us on the fed-eng team use as an IRC proxy), and talked with Patrick some about this on IRC. I don't know if this is enough but I want a badge, so I am just throwing that out there and being hopeful. :P
Image(shellshock.png)
Updated with amsharmas suggestion
Feedback welcome
Image(shellshock.png)
Updated with amsharmas suggestion
Feedback welcome
Hey Marie,
Nice work .. May I suggest you to put a
symbol instead of a turtle or can we havesymbol on the middle white area of turtle body.is important because in fedorarepresents shell prompt and this vulnerability is found in shell/bash i.e. why it is called as shellshock :)Hope it helps.
don't forget to award me this badge ;)
Hey Marie,
Nice work .. May I suggest you to put a
symbol instead of a turtle or can we havesymbol on the middle white area of turtle body.is important because in fedorarepresents shell prompt and this vulnerability is found in shell/bash i.e. why it is called as shellshock :)Hope it helps.
don't forget to award me this badge ;)
Replying to [comment:8 kevin]:
On the same coordinating topic, I nominate smooge as well.
Replying to [comment:8 kevin]:
On the same coordinating topic, I nominate smooge as well.
attachment
shellshock_v5.svg
attachment
shellshock_v5.svg
Replying to [comment:12 riecatnor]:
Updated with amsharmas suggestion
Replying to [comment:12 riecatnor]:
Updated with amsharmas suggestion
Replying to [comment:15 riecatnor]:
I like it!
Replying to [comment:15 riecatnor]:
I like it!
attachment

attachment

attachment

attachment

Replying to [comment:15 riecatnor]:
Replying to [comment:15 riecatnor]:
I gave karma to a couple updates. Oddshocks told me indicate that here :)
I gave karma to a couple updates. Oddshocks told me indicate that here :)
I guess the easiest will be to take the people nominated here + the one that gave karma in bodhi.
I guess the easiest will be to take the people nominated here + the one that gave karma in bodhi.
Replying to [comment:19 pingou]:
Yeah. I don't think we need separate nominations for bodhi karma.
Don't forget masta (jon disnard) and dgilmore from releng. And ryanlerch for magazine articles.
Replying to [comment:19 pingou]:
Yeah. I don't think we need separate nominations for bodhi karma.
Don't forget masta (jon disnard) and dgilmore from releng. And ryanlerch for magazine articles.
sysadmin-badges can set this up once design team has finalized the artwork.
sysadmin-badges can set this up once design team has finalized the artwork.
Thanks Marie :). You are awesome.
I gave karma in bodhi, tested, posted blog, gave suggestion for badge design.
Thanks Marie :). You are awesome.
I gave karma in bodhi, tested, posted blog, gave suggestion for badge design.
attachment
shellshock_v6.svg
attachment
shellshock_v6.svg
attachment

attachment

Gnokii and I agree on shellshock_v6.png
Gnokii and I agree on shellshock_v6.png
All pushed out! If I missed anyone, please comment here and we can fix it later.
All pushed out! If I missed anyone, please comment here and we can fix it later.
Replying to [comment:25 ralph]:
Replying to [comment:25 ralph]:
amsharma,
If [https://badges.fedoraproject.org/user/amsharma this is] your profile then I can see you have been already awarded this badge :)
amsharma,
If [https://badges.fedoraproject.org/user/amsharma this is] your profile then I can see you have been already awarded this badge :)
Replying to [comment:27 pnemade]:
Replying to [comment:27 pnemade]:
when its enough to make a design suggestion to earn it or just give a little bit of karma, then I really must question why the people who did the badge didnt get it?
when its enough to make a design suggestion to earn it or just give a little bit of karma, then I really must question why the people who did the badge didnt get it?
Testing and adding a little bit of karma when there's an urgent update is no small thing.
If someone just made a badge design suggestion and didn't help with the rest that probably doesn't count, but in a quick skim I don't see that as happening. And there are already separate badges for making badges, right? (I don't think it makes sense for the badge makers to automatically get all of the badges they make, does it?)
Testing and adding a little bit of karma when there's an urgent update is no small thing.
If someone just made a badge design suggestion and didn't help with the rest that probably doesn't count, but in a quick skim I don't see that as happening. And there are already separate badges for making badges, right? (I don't think it makes sense for the badge makers to automatically get all of the badges they make, does it?)
well, first there are no badges for artists implemented yet and second for adding karma also badges are given ;)
So when artwork contribution doesnt count, because there might be a badge someday, why counts karma then doubled? Btw. for blog postings are also badges awarded.
So when then for all the same rights ;)
well, first there are no badges for artists implemented yet and second for adding karma also badges are given ;)
So when artwork contribution doesnt count, because there might be a badge someday, why counts karma then doubled? Btw. for blog postings are also badges awarded.
So when then for all the same rights ;)
Replying to [comment:31 gnokii]:
Oooh, that seems like the problem right there. :)
The badge is supposed to be a fun, small reward for helping in the actual crisis response. Making a badge is awesome, but is not really part of that response. Let's not dilute it!
Replying to [comment:31 gnokii]:
Oooh, that seems like the problem right there. :)
The badge is supposed to be a fun, small reward for helping in the actual crisis response. Making a badge is awesome, but is not really part of that response. Let's not dilute it!
I have to agree with gnokii on this. Within 24 hours of this ticket being made I had uploaded artwork. If karma, testing, blog posting and coordination are counted as 'crisis response'(and they are!) then why not design?
I am not suggesting that badge artists should receive every badge they design- but in this instance I would say that the artwork that was made for the shellshock crisis is clearly a concentration... not a dilution.
I have to agree with gnokii on this. Within 24 hours of this ticket being made I had uploaded artwork. If karma, testing, blog posting and coordination are counted as 'crisis response'(and they are!) then why not design?
I am not suggesting that badge artists should receive every badge they design- but in this instance I would say that the artwork that was made for the shellshock crisis is clearly a concentration... not a dilution.
I do appreciate the fast response -- that did make this all more fun, and that's what this is supposed to be. Also, it's supposed to be a "we're all part of the awesome team" thing, not exclusionary. So, okay, sure, I'm convinced.
I do appreciate the fast response -- that did make this all more fun, and that's what this is supposed to be. Also, it's supposed to be a "we're all part of the awesome team" thing, not exclusionary. So, okay, sure, I'm convinced.
@Matt you made my day and made me smile again
@Matt you made my day and made me smile again
Done.
Done.
Huzaifa Sidhpurwalla and Florian Weimer were primary coordinators for the shellshock flaw and fixes (google 'huzaifa shellshock' or 'florian weimer shellshock' without the quotes) in RHEL as well as Fedora. I believe they qualify for this badge as well. FAS names: huzaifas, fweimer
Huzaifa Sidhpurwalla and Florian Weimer were primary coordinators for the shellshock flaw and fixes (google 'huzaifa shellshock' or 'florian weimer shellshock' without the quotes) in RHEL as well as Fedora. I believe they qualify for this badge as well. FAS names: huzaifas, fweimer
Thanks siddhesh. Done!
Thanks siddhesh. Done!
attachment

attachment

@threebean, please sub in shellshock_v6.2.png when you have a chance. though the file gnokii uploaded looks right, it looks bigger on the site. I exported it again so this one should work.
@threebean, please sub in shellshock_v6.2.png when you have a chance. though the file gnokii uploaded looks right, it looks bigger on the site. I exported it again so this one should work.