Reputation
774
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
5 22
Impact
~140k people reached

  • 0 posts edited
  • 2 helpful flags
  • 106 votes cast
Sep
26
revised Are Macs vulnerable to the Bash shellshock bug?
added 318 characters in body
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
As I said below, ALL servers should be assumed to call bash unless proven otherwise. And Mac OS X is full of privilege escalation exploits once you reach a shell.
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
Apache modules, CGI scripts, etc. commonly call bash. Very effective hack right here : twitter.com/JZdziarski/status/515135854436962304 And even if your Apache configuration does not call bash under normal operation, no telling what an attacker can convince it to do.
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
How do you know that? Initial advisory was a vulnerable DHCP client. And many articles speculate that Mac OS X and/or iOS DHCP clients might be vulnerable. All servers should be assumed to be vulnerable unless proven otherwise.
Sep
26
answered Are Macs vulnerable to the Bash shellshock bug?
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
There are likely privilege escalation risks from a guest account too. Who cares though? Any Mac OS X machines is extremely vulnerable once users get access, especially local users. It's server daemons that should scare you, not just sshd though, all server daemons.
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
-1 Very wrong. There are many tools that use bash : Installation scripts usually use bash, creating privilege escalation risks. All servers should be assumed to use bash unless you know otherwise, not just sshd. In particular, apache could create a remote vulnerability using bash. etc.
Sep
1
awarded  Popular Question
Jul
2
awarded  Curious
Jun
19
awarded  Popular Question
Jun
5
awarded  Popular Question
Apr
9
awarded  Notable Question
Nov
3
awarded  Yearling
Sep
17
awarded  Notable Question
May
1
awarded  Popular Question
Feb
5
awarded  Caucus
Feb
3
awarded  Popular Question
Jan
5
revised Are my frequent Safari beach balls caused by my extensions?
edited body
Jan
5
answered Are my frequent Safari beach balls caused by my extensions?
Jan
3
comment Are my frequent Safari beach balls caused by my extensions?
Yes, I may need to try disabling all extensions, the one at a time hasn't yielded anything useful yet. It's also simply possible that Safari has grown long in the tooth and I shold give Chrome another try, definitely Chrome has a better JavaScript engine.