|
A bug discovered in the widely used Bash command interpreter poses a critical security risk to Unix and Linux systems – and, thanks to their ubiquity, the wider internet.
Does that go in the oops file?
|
|
|
|
|
I don't get it. Why is a bash bug, since is executed via cgi? It seems a question of rights for me (setuid/setgid).
|
|
|
|
|
Well, before the 'experts' are rating this as a 10oo10 on the sh*tstorm scale it must be pretty bad.
Reading the description of the flaw, it does read pretty bad in terms of what is potentially at risk of the exploit.(including potential devices).
|
|
|
|
|
The bug really is in bash, it's not in any way dependent on the CGI mechanism. CGI is only mentioned as an example how the bash bug could be exploited remotely.
|
|
|
|
|
Can some give a concrete example code when and how this bug is used? I didn't found any. From 5 years experience with LAMP environment, I never ever was required to use environment variables or CGI. I don't see how the bug can blast such system wide open.
|
|
|
|
|
|
Well, it seems quite obvious to me: they just need to bash the bug!
*groan*
Marc
|
|
|
|
|
Hopefully this idiot [^]was too young to breed and earned a valid Award.
Never underestimate the power of human stupidity
RAH
|
|
|
|
|
|
Dammed net nazi, I'll need to take a look at that when I get home, as someone offered to buy me a beer on the way it may not be for a while!
Never underestimate the power of human stupidity
RAH
|
|
|
|
|
"He is all a-quiver when spring is here!"(5,7)&lit
Best of luck.
---------------------------------
Obscurum per obscurius.
Ad astra per alas porci.
Quidquid latine dictum sit, altum videtur .
|
|
|
|
|
vernal equinox = spring is here, but answer is(5,7)
have a partial solution as the above is an anagram of lennox aquiver, but can't work out how/if lennox is related to "he is all"...
Alberto Brandolini: The amount of energy necessary to refute bullshit is an order of magnitude bigger than to produce it.
|
|
|
|
|
No, completely on the wrong track.
---------------------------------
Obscurum per obscurius.
Ad astra per alas porci.
Quidquid latine dictum sit, altum videtur .
|
|
|
|
|
What's the answer Dave ?
We can’t stop here, this is bat country - Hunter S Thompson RIP
|
|
|
|
|
Today I reached new high in my understanding of how evil JavaScript really is! ...  
The project was going well, I had lots of client side dynamic thing using MVVM + Knockout, until....
I got the bug: we got this alert "this script is running slow" ...
Damn it's on client side filtered paged grid.. it just can't be (fake) asynchronous (using setTimeout() callback), what to do! what to do! Oh you evil JavaScript! 
|
|
|
|
|
It's not javascript that is evil.
Javascript is a about as evil as a knive, a gun or a hydrogen bomb.
It's the way it is being misused that should be demonized.
Javascript is good!
I like Javascript!
People are evil! I'm not evil and if I had any friends they'd confirm this.
Ok, some people are just weird, but still ...
Javascript is NOT evil!
"I had the right to remain silent, but I didn't have the ability!"
Ron White, Comedian
|
|
|
|
|
JavaScript doesn't kill people, people using JavaScript kill people
you will have to pry the .js file from my cold dead hand
You cant outrun the world, but there is no harm in getting a head start
Real stupidity beats artificial intelligence every time.
|
|
|
|
|
Bergholt Stuttley Johnson wrote: JavaScript doesn't kill people, people using JavaScript kill people I want to kill some people who use JavaScript
Modified to accurately reflect personal requirements.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
Sorry, my bad, obviously you are right! JavaScript is as good as an hydrogen bomb, obviously! 
|
|
|
|
|
download more RAM in the background.
|
|
|
|
|
I'm with Manfred on this one - JavaScript simply doesn't have the moral agency necessary to be evil.
Alberto Brandolini: The amount of energy necessary to refute bullshit is an order of magnitude bigger than to produce it.
|
|
|
|
|
I recall that you picked up one of the V1's...are you going after the V2's? And have you developed anything with them, and/or what are you doing with them?
I was thinking of them in a training scenario...still trying to picture exactly how to use them, but think they have a place....
Ken
|
|
|
|
|
RTek23 wrote: one of the V1's...are you going after the V2's?
Christ! I knew Dave was worried about the state of Scotland, but didn't know he'd resorted to stocking up on rockets!
PooperPig - Coming Soon
|
|
|
|
|
_Maxxx_ wrote: Christ! I knew Dave was worried about the state of Scotland, but didn't know he'd resorted to stocking up on rockets!
Darn, now its out ... i had to help him clickedy[^]
if(this.signature != "")
{
MessageBox.Show("This is my signature: " + Environment.NewLine + signature);
}
else
{
MessageBox.Show("404-Signature not found");
}
|
|
|
|
|
RTek23 wrote: I recall that you picked up one of the V1's
I thought he was into rockets, not jets.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
