Old News, but still a worry …
The referenced article in turned referred to this one:
http://www.defensecode.com/public/DefenseCode_Unix_WildCards_Gone_Wild.txt
which was very helpful. The following article rubs it in:
http://www.dwheeler.com/essays/fixing-unix-linux-filenames.html
I tried it myself with the following:
mkdir one; touch one/stuff; mkdir two; touch two/stuff; touch ./-rf
rm *
The trick, of course is in the ./ prefix, which allows you to get away with murder.
A solution:
yum install detox
detox -rv ./*
The other part of the solution is to filter all incoming file names.