Let's Catch Our Breath

• So far we've seen:

  • What Unix's rm -rf does and how it is affected by directory permissions

  • Seen that Perl's File::Path::rmtree() was born in 1995 with same behavior as rm -rf

  • Seen that File::Path::rmtree()'s default behavior was drastically changed in 1997

• But where's the security vulnerability?