Tag Info

Hot answers tagged

400

Status Apple has released Bash security fixes for Shellshock and related vulnerabilities as "OS X bash Update 1.0". They can be installed through normal system update for people using OS X Mountain Lion v10.8.5 or OS X Mavericks v10.9.5 (they are included in Security Update 2014-005) and can also be installed manually. Official Apple fixes are also ...


42

Yes you are technically vulnerable. So if you feel like panicking or billing a panicked client for a few hours of panic work, go for it! But the reality is unless you allow SSH access from remote connections or a web server that runs server side scripting, you are not at risk. You are only truly vulnerable if someone you do not know can remotely access your ...


33

Yes! Type this in your shell env x='() { :;}; echo vulnerable' bash -c 'echo hello' If it says vulnerable then you are vulnerable. If it says bash: warning: x: ignoring function definition attempt bash: error importing function definition for `x' hello then you are good. Edit: link to the fix


13

Macports This gets you a bash version 4.3.28(1) which patched both vulnerabilities (CVE-2014-6271 and CVE-2014-7169) as well as some subsequently discovered ones. This is useful if you have changed shells to use Macports bash to get the version 4 features. It will not solve the issue of standard OS scripts as the have #!/bin/sh or #!/bin/bash as the first ...


10

NOTE regarding the official Apple OS X bash Update 1.0: This software update only brings the official Apple bash version to 3.2.53. The 3.2.54 patch revision offers the following change: This patch changes the encoding bash uses for exported functions to avoid clashes with shell variables and to avoid depending only on an environment variable's ...


10

For anyone struggling with compiling from source, as of September 29th, Apple has officially released patches for Mac OS X 10.9.5, 10.8.5 as well as 10.7.5: OS X bash Update 1.0 – OS X Mavericks OS X bash Update 1.0 – OS X Mountain Lion OS X bash Update 1.0 - OS X Lion


5

Wi-Fi passwords are synchronized via iCloud keychain. That's why your iPhone also knows the password. Try deleting this network from Preferred Networks. Also delete item from your keychain. In Keychain Access.app select iCloud keychain, find the item with the SSID (network name) of your neighbor's network and remove it (Right click -> Remove).


5

First, you don't need to do this unless you are are offering web services to the public internet from your Mac. If you are not, wait until there is an official security update from Apple. However, if you are offering web services, you might want to update. Official Patch Apple has released an Official Bash Security Update Here Checking whether you are ...


4

Macs don't use Bash for DHCP, so that particular vulnerability does not apply. Unless you run a vulnerable web server or have restricted remote access accounts, it's not worth the trouble to recompile Bash on OS X.


4

No, The app doesn't expose past actions and events to users. You should check that your AppleID is emailing an email address you control since erase and lock events trigger an email to the email on record for admin changes / security at https://appleid.apple.com There might be server logs and if you are really interested in knowing who erased your phone, ...


3

You can limit access to specific apps via the Parental Controls in: System Prefs > Users & Groups > Guest User then click the Open Parental Controls. It may take some configuration to get all the services working. But I've logged into guest having disabled Little Snitch and it hasn't opened. It worked fine when I logged back into my account.


3

Yes, it will still function without the guest account. However, in order for Find my Mac to locate your Mac, the Mac needs to be connected to the internet. If your account is secure and your Mac is stolen, presumably the thief would not know your password, and so wouldn't be able to login and join a WiFi network. Leaving guest access enabled allows them ...


3

As @webmarc said, no. You can replace /bin/bash with some other shell but you will certainly break some programs because bash has several differences in his syntax that made it incompatible. I couldn’t find a bash-compatible alternative shell. However I symlinked dash to /bin/sh and found no issues so far. Regarding the DHCP here there is a proof of concept ...


3

As an end user, check that: your guest account is off: System Preferences > Users & Groups > Guest User your ssh access is off: System Preferences > Sharing > Remote Login By default these are both off on Mavericks. As an end user, it is safer to wait for an official Apple security update fixing this bash vulnerability.


2

Obviously you joined neighbors network once upon a time. Since you have the "Remember networks this computer has joined" Enabled, it will remember it. Find it and delete it in networks - advanced, or just delete both and next time reconnect in the coffee shop, but do not connect to Free WiFi if showing up when at home. The fact that they have the same ...


2

I made this tool as soon as I heard about this vulnerability. It'll provide you with a link to a article to patch your shell if the tool determines you're vulnerable. Requires Mac OS X 10.6 and up.


2

Will this update (eventually) be applied automatically via the App Store, or do I have to apply it manually? As I explain in my answer on the question you link to, Apple has released patches you can download & run yourself. You do not have too compile from source or be deeply technically capable to run them. Just download the one appropriate for ...


1

I would advise against making the Homebrew installation of bash your system-wide bash or sh command. However it should be fine to use as your personal shell. Homebrew provides a vanilla installation of Gnu Bash. You will be missing any Apple additions to the shell that are provided if you use the Apple-supplied bash or sh binaries or source code from ...


1

If you don't want to recompile Bash yourself, the folks at TenFourFox (who make a PPC version of Firefox) have compiled a binary that works on OS X 10.4 - 10.9 on both PPC and Intel Macs, and have terminal instructions for installing: http://tenfourfox.blogspot.com/2014/09/bashing-bash-one-more-time-updated.html At the time of writing (Sept 30) they've ...


1

Bonjour advertising can be disabled by following the steps listed at "How to disable Bonjour service advertising": Make a back up copy of the mDNSResponder.plist file as a precaution. Open the mDNSResponder.plist file in Terminal using your preferred text editor. Here is a sample command: sudo nano ...


1

You can't see the link as you only get a few attempts at getting the answers correct. Apple Support Document If you can't reset your security questions Contact Apple Support in either of these circumstances: You don't see the link to send a reset email, which means you don't have a rescue address. You see the link to send a reset ...


1

All Mac OS X machines are technically vulnerable to “Shellshock,” until Apple issues a security update that patches bash, but.. Your question should be: Can I be hacked remotely? There is so much software that uses bash absent-mindedly that answering that question is extremely hard. If you're worried then I'd suggest several changes in System ...


1

Yes, you should. Even in the very worst case, you're trading a known-exploitable version of a program for one that is theoretically exploitable only by whoever crafted a potential back door. Tons of people know about the current problem and can use it against you right now, but presumably few people know about this hypothetical back door that may not even ...


1

dash contains only a tiny subset of the commands found in bash and even sh (which itself is a sub-set of things in bash). Replacing either with dash will surely yield inoperable scripts on your system and possibly break your system more than it protects your system. You can recompile bash to mitigate some (at the time this was written) of potential danger ...


1

Unfortunately, no... various shells have differing syntaxes making the scripts written for one shell possibly incompatible with another shell. I haven't seen the DHCP based infection you're speaking of, can you provide a link in your question?


1

In iTunes menus: File > Home Sharing > Turn Off Home Sharing


1

Open your Console Select system.log Type in the following query in the search pane (upper right hand corner): USBMSC You will see something like kernel: USBMSC Identifier (then an alphanumeric string indicating the USB bus address) The date and time is shown as well. This will let you know the last time(s) a device was connected to a particular USB bus.


1

The problem that I see with "almost every article" is that they're 3-4 years old. Some of them even mention attempting degaussing the drives as a means of clearing out data. That implies a lack of understanding of how Flash storage works in the first place. Seriously. Degaussing? "ATA Secure Erase" is a means of telling the drive to zero out all the blocks. ...



Only top voted, non community-wiki answers of a minimum length are eligible