Tag: security

Bug in Bash shell creates big security hole on anything with *nix in it

Mac OS X Mavericks is also a *nix, and also vulnerable to the Bash bug.Sean Gallagher UPDATE, 9/25: The Bash vulnerability, now dubbed by some as “Shellshock,” has been reportedly found in use by an active exploit against Web servers. Additionally, the initial patch for the vulnerability was incomplete and still allows for attacks to succeed, according to a new CERT alert. See Ars’ latest report for further details, our initial report is below. A security vulnerability in the GNU Bourne Again Shell (Bash), the command-line shell used in many Linux and Unix operating systems, could leave systems running those operating systems open to exploitation by specially crafted attacks. “This issue is especially dangerous as there are many possible ways Bash can be called …

Original Article Can Be Found Here:

Bug in Bash shell creates big security hole on anything with *nix in it

How To Check If Your Mac or Linux Machine Is Vulnerable to Shellshock

Shellshock, the newly discovered vulnerability that allows attackers to inject code into your machine, puts your Mac or Linux at a serious risk for malicious attacks. Here’s how to test if your machine is vulnerable. Shellshock uses a bash script to access your computer. From there, they can launch programs, enable features, and access files. The script only affects UNIX-based systems, so Linux and Mac are the only ones vulnerable. You can test your system by running this test command from Terminal: env x='() :;; echo vulnerable’ bash -c ‘echo hello’ If you’re not vulnerable, you’ll get this result: bash: warning: x: ignoring function definition attempt bash: error importing function definition for `x’ hello If you are vulnerable, you’ll get: vulnerable hello You can also…

View original:

How To Check If Your Mac or Linux Machine Is Vulnerable to Shellshock

Announcing Keyless SSLâ„¢: All the Benefits of CloudFlare Without Having to Turn Over Your Private SSL Keys

CloudFlare is an engineering-driven company. This is a story we’re proud of because it embodies the essence of who we are: when faced with a problem, we found a novel solution. Technical details to follow but, until then, welcome to the no hardware world. (Update: The post with the technical details is now online.) Fall in San Francisco The story begins on a Saturday morning, in the Fall of 2012, almost exactly two years ago. I got a call on my cell phone that woke me. It was a man who introduced himself as the Chief Information Security Officer (CISO) at one of the world’s largest banks. “I got your number from a reporter,” he said. “We have an incident. Could you and some of…

Read article here:

Announcing Keyless SSLâ„¢: All the Benefits of CloudFlare Without Having to Turn Over Your Private SSL Keys

© 2024 Paul Parisi

Theme by Anders NorénUp ↑