Re: RFC 227 (v1) Extend the window to turn on taint mode

[Sam Tregar]

On 14 Sep 2000, Chaim Frenkel wrote:

> (Someone remind me, What is the point of -T if not running setuid?)

All you need to get root is an unprivilaged shell on anything but a
fully patched machine.  A dumb Perl CGI running without -T is all you need
to get a shell.

Besides, I bet most online stores keep our credit card numbers in
databases accessible by 'nobody'.  You probably wouldn't even need root in
most cases if you were after card numbers.

-sam