Tag Info

Hot answers tagged

10

For anyone struggling with compiling from source, as of September 29th, Apple has officially released patches for Mac OS X 10.9.5, 10.8.5 as well as 10.7.5: OS X bash Update 1.0 – OS X Mavericks OS X bash Update 1.0 – OS X Mountain Lion OS X bash Update 1.0 - OS X Lion


5

First, you don't need to do this unless you are are offering web services to the public internet from your Mac. If you are not, wait until there is an official security update from Apple. However, if you are offering web services, you might want to update. Official Patch Apple has released an Official Bash Security Update Here Checking whether you are ...


4

Macs don't use Bash for DHCP, so that particular vulnerability does not apply. Unless you run a vulnerable web server or have restricted remote access accounts, it's not worth the trouble to recompile Bash on OS X.


4

No, The app doesn't expose past actions and events to users. You should check that your AppleID is emailing an email address you control since erase and lock events trigger an email to the email on record for admin changes / security at https://appleid.apple.com There might be server logs and if you are really interested in knowing who erased your phone, ...


3

You can limit access to specific apps via the Parental Controls in: System Prefs > Users & Groups > Guest User then click the Open Parental Controls. It may take some configuration to get all the services working. But I've logged into guest having disabled Little Snitch and it hasn't opened. It worked fine when I logged back into my account.


3

Bluetooth needs to be in advertising mode for Yosemite's Handoff to work. To disable Handoff in Mac Yosemite: Select System Prefs > General and uncheck "Allow Handoff between this Mac and your iCloud devices".


3

As @webmarc said, no. You can replace /bin/bash with some other shell but you will certainly break some programs because bash has several differences in his syntax that made it incompatible. I couldn’t find a bash-compatible alternative shell. However I symlinked dash to /bin/sh and found no issues so far. Regarding the DHCP here there is a proof of concept ...


3

As an end user, check that: your guest account is off: System Preferences > Users & Groups > Guest User your ssh access is off: System Preferences > Sharing > Remote Login By default these are both off on Mavericks. As an end user, it is safer to wait for an official Apple security update fixing this bash vulnerability.


2

Obviously you joined neighbors network once upon a time. Since you have the "Remember networks this computer has joined" Enabled, it will remember it. Find it and delete it in networks - advanced, or just delete both and next time reconnect in the coffee shop, but do not connect to Free WiFi if showing up when at home. The fact that they have the same ...


2

I made this tool as soon as I heard about this vulnerability. It'll provide you with a link to a article to patch your shell if the tool determines you're vulnerable. Requires Mac OS X 10.6 and up.


2

Will this update (eventually) be applied automatically via the App Store, or do I have to apply it manually? As I explain in my answer on the question you link to, Apple has released patches you can download & run yourself. You do not have too compile from source or be deeply technically capable to run them. Just download the one appropriate for ...


2

Here is what is going on with missing reset password with Apple ID. FileVault 2-enabled Macs will not show a "Allow user to reset password using Apple ID" How to in FileVault is described here. Since you are NOT using the Apple ID password recovery feature (it is not enabled) your FileVault password is NOT vulnerable to it. It can not be used on ...


1

In OS X 10.9, Bonjour advertising can be disabled by following the steps listed at "How to disable Bonjour service advertising": Make a back up copy of the mDNSResponder.plist file as a precaution. Open the mDNSResponder.plist file in Terminal using your preferred text editor. Here is a sample command: sudo nano ...


1

You can't see the link as you only get a few attempts at getting the answers correct. Apple Support Document If you can't reset your security questions Contact Apple Support in either of these circumstances: You don't see the link to send a reset email, which means you don't have a rescue address. You see the link to send a reset ...


1

Here is a patch, which is renaming Google Chrome/Chromium inside startup file and placing a script for calling browser with --ssl-version-min=tls1 parameter. No wrapper needed.


1

If you don't want to recompile Bash yourself, the folks at TenFourFox (who make a PPC version of Firefox) have compiled a binary that works on OS X 10.4 - 10.9 on both PPC and Intel Macs, and have terminal instructions for installing: http://tenfourfox.blogspot.com/2014/09/bashing-bash-one-more-time-updated.html At the time of writing (Sept 30) they've ...


1

I would advise against making the Homebrew installation of bash your system-wide bash or sh command. However it should be fine to use as your personal shell. Homebrew provides a vanilla installation of Gnu Bash. You will be missing any Apple additions to the shell that are provided if you use the Apple-supplied bash or sh binaries or source code from ...


1

All Mac OS X machines are technically vulnerable to “Shellshock,” until Apple issues a security update that patches bash, but.. Your question should be: Can I be hacked remotely? There is so much software that uses bash absent-mindedly that answering that question is extremely hard. If you're worried then I'd suggest several changes in System ...


1

Yes, you should. Even in the very worst case, you're trading a known-exploitable version of a program for one that is theoretically exploitable only by whoever crafted a potential back door. Tons of people know about the current problem and can use it against you right now, but presumably few people know about this hypothetical back door that may not even ...



Only top voted, non community-wiki answers of a minimum length are eligible