What the badge should be granted for:
Helping build, test, document, or push the fix for CVE-2014-6271 (and followups).
Badge description: "You helped us bash the shellshocked bug."
Anything else we need to know:
Like: https://badges.fedoraproject.org/badge/heartbleed-buster
Definitely a +1 from me. Important, and would be a good sister badge to heardbleed-buster, like you mentioned.
Also, love the pun in the description. ;)
Would it be an idea to include people that deployed fixes in Fedora Infra? (for which I'll nominate myself)
Replying to [comment:2 puiterwijk]:
Yes. :)
+1 from me.
I assume people who have tested the Bodhi update (and checked other shells for similar issues) qualify?
Sparks and jsmith should both be on the list for this badge :)
Oh looky, a new badge.
I'm happy to do the pushing if you folks do the build, testing, and documenting. =)
I sent out emails! I'm helping!
I coordinated with Patrick on applying things to infra and helped answer user questions in #fedora. ;)
I'd be happy to help out with art- does anyone have concepts for the design?
Horrible trademark violation, or parody: Mario Kart blue shell getting struck by lightning.
I deployed fixes on fedorashell (an internal shell server some of us on the fed-eng team use as an IRC proxy), and talked with Patrick some about this on IRC. I don't know if this is enough but I want a badge, so I am just throwing that out there and being hopeful. :P
[[Image(shellshock.png)]]
Updated with amsharmas suggestion
Feedback welcome
Hey Marie,
Nice work .. May I suggest you to put a $ symbol instead of a turtle or can we have $ symbol on the middle white area of turtle body. $ is important because in fedora $ represents shell prompt and this vulnerability is found in shell/bash i.e. why it is called as shellshock :) Hope it helps.
don't forget to award me this badge ;)
Replying to [comment:8 kevin]:
On the same coordinating topic, I nominate smooge as well.
attachment shellshock_v5.svg
Replying to [comment:12 riecatnor]:
[[Image(shellshock.png)]] Feedback welcome
Replying to [comment:15 riecatnor]:
Replying to [comment:12 riecatnor]: Feedback welcome Updated with amsharmas suggestion
I like it!
attachment <img alt="shellshock.png" src="//issue/raw/files/3dbeb1d1c297b1305b62d40151320d095286150a2015527d05603d3a810e0b1d-shellshock.png" />
attachment <img alt="shellshock.png" src="https://pagure.io/Fedora-Badges/issue/raw/files/3dbeb1d1c297b1305b62d40151320d095286150a2015527d05603d3a810e0b1d-shellshock.png" />
attachment <img alt="shellshock_v2.png" src="https://pagure.io/Fedora-Badges/issue/raw/files/7b3bd1fd5bd8c82f5598a28f96add4a49fc21f6365e34051f438b7aaeddf4e0b-shellshock_v2.png" />
attachment <img alt="shellshock_v2.png" src="//issue/raw/files/7b3bd1fd5bd8c82f5598a28f96add4a49fc21f6365e34051f438b7aaeddf4e0b-shellshock_v2.png" />
Replying to [comment:12 riecatnor]: [[Image(shellshock.png)]] Feedback welcome Updated with amsharmas suggestion [[Image(shellshock_v2.png)]] Version 2 with suggestions from gnokii
Updated with amsharmas suggestion [[Image(shellshock_v2.png)]] Version 2 with suggestions from gnokii
I gave karma to a couple updates. Oddshocks told me indicate that here :)
I guess the easiest will be to take the people nominated here + the one that gave karma in bodhi.
Replying to [comment:19 pingou]:
Yeah. I don't think we need separate nominations for bodhi karma.
Don't forget masta (jon disnard) and dgilmore from releng. And ryanlerch for magazine articles.
sysadmin-badges can set this up once design team has finalized the artwork.
Thanks Marie :). You are awesome. I gave karma in bodhi, tested, posted blog, gave suggestion for badge design.
attachment shellshock_v6.svg
attachment <img alt="shellshock_v6.png" src="//issue/raw/files/b26d648a4d7e8bc766cb71f4f18f89592f070a9d4f9a3b756e83cf926a00116a-shellshock_v6.png" />
attachment <img alt="shellshock_v6.png" src="https://pagure.io/Fedora-Badges/issue/raw/files/b26d648a4d7e8bc766cb71f4f18f89592f070a9d4f9a3b756e83cf926a00116a-shellshock_v6.png" />
Gnokii and I agree on shellshock_v6.png
All pushed out! If I missed anyone, please comment here and we can fix it later.
Replying to [comment:25 ralph]:
All pushed out! If I missed anyone, please comment here and we can fix it later. RJ, you missed me... I gave karma in bodhi, tested, posted blog, gave suggestion for badge design.
amsharma, If [https://badges.fedoraproject.org/user/amsharma this is] your profile then I can see you have been already awarded this badge :)
Replying to [comment:27 pnemade]:
amsharma, If [https://badges.fedoraproject.org/user/amsharma this is] your profile then I can see you have been already awarded this badge :) Oh yeah Parag, thanks :)
when its enough to make a design suggestion to earn it or just give a little bit of karma, then I really must question why the people who did the badge didnt get it?
Testing and adding a little bit of karma when there's an urgent update is no small thing.
If someone just made a badge design suggestion and didn't help with the rest that probably doesn't count, but in a quick skim I don't see that as happening. And there are already separate badges for making badges, right? (I don't think it makes sense for the badge makers to automatically get all of the badges they make, does it?)
well, first there are no badges for artists implemented yet and second for adding karma also badges are given ;) So when artwork contribution doesnt count, because there might be a badge someday, why counts karma then doubled? Btw. for blog postings are also badges awarded.
So when then for all the same rights ;)
Replying to [comment:31 gnokii]:
well, first there are no badges for artists implemented yet
Oooh, that seems like the problem right there. :)
So when artwork contribution doesnt count, because there might be a badge someday, why counts karma then doubled? Btw. for blog postings are also badges awarded. So when then for all the same rights ;)
So when artwork contribution doesnt count, because there might be a badge someday, why counts karma then doubled? Btw. for blog postings are also badges awarded.
The badge is supposed to be a fun, small reward for helping in the actual crisis response. Making a badge is awesome, but is not really part of that response. Let's not dilute it!
I have to agree with gnokii on this. Within 24 hours of this ticket being made I had uploaded artwork. If karma, testing, blog posting and coordination are counted as 'crisis response'(and they are!) then why not design?
I am not suggesting that badge artists should receive every badge they design- but in this instance I would say that the artwork that was made for the shellshock crisis is clearly a concentration... not a dilution.
I do appreciate the fast response -- that did make this all more fun, and that's what this is supposed to be. Also, it's supposed to be a "we're all part of the awesome team" thing, not exclusionary. So, okay, sure, I'm convinced.
@Matt you made my day and made me smile again
Done.
Huzaifa Sidhpurwalla and Florian Weimer were primary coordinators for the shellshock flaw and fixes (google 'huzaifa shellshock' or 'florian weimer shellshock' without the quotes) in RHEL as well as Fedora. I believe they qualify for this badge as well. FAS names: huzaifas, fweimer
Thanks siddhesh. Done!
attachment <img alt="shellshock_v6.2.png" src="https://pagure.io/Fedora-Badges/issue/raw/files/659e29073d4245de45ad2626303c6224b2ad2c99f4adf85321285668d5227e10-shellshock_v6.2.png" />
attachment <img alt="shellshock_v6.2.png" src="//issue/raw/files/659e29073d4245de45ad2626303c6224b2ad2c99f4adf85321285668d5227e10-shellshock_v6.2.png" />
@threebean, please sub in shellshock_v6.2.png when you have a chance. though the file gnokii uploaded looks right, it looks bigger on the site. I exported it again so this one should work.
Login to comment on this ticket.