Warning android phone users, mac users. Update system packages.

There is a zeroday bash vulnerability in the wild which allows remote code execution on vulnerable machines running a bash daemon. If you own an android phone or a mac computer, or you rent a VPS or other server you need to upgrade bash on all of these.

https://access.redhat.com/node/1200223

You can find more information about the vulnerability by googling. I suggest you act quickly to avoid any chance of hacking.

 

thanks for heads up

 

[S]

What does this exactly mean in layman terms? I understand it's a vulnerability, but how does it affect us day to day users - I own an android phone.

 

[Dave]

Thanks for the post Rich.

 

What does this exactly mean in layman terms? I understand it's a vulnerability, but how does it affect us day to day users - I own an android phone.

This, doubt I'm at risk but wouldn't mind a version in English to double check my phone is secure.

 

[funbox]

thanks for the warning rich.

 

[Master]

Thank you.

 

[Time To Buy]

What does this exactly mean in layman terms? I understand it's a vulnerability, but how does it affect us day to day users - I own an android phone.

This, doubt I'm at risk but wouldn't mind a version in English to double check my phone is secure.

This. I have a Mac, but I don't really use it that much for internet browsing (I use my ipod for that). Should I be worried? Literally, the only sites I've visited on my laptop this month are sythe, RS, cnn, the tank ball site, 9gag, and some sites for school.

 

[Mindaugas]

Thanks man.

 

[Hamouze]

I've recently been hacked on RS and can't find any explanation for it. Changed my pass a bunch of times and keep getting emails of someone trying to disable my authenticator and change my email. Could this possibly be related?

 

Thanks bic boy rich.

Would 2factor protect me if I fell victim to this?

 

[Naxious]

Thanks for the heads up , I too have a android

 

The exploit is still less than 24 hours old. No one is quite sure how it will affect different devices. Unmodded android phones are probably safe. You should run updates anyway.

Apple have yet to release a patch. OSX is still at risk.

 

[Alex_J_Leon]

http://apple.stackexchange.com/ques...hellshock-the-remote-exploit-cve-2014-6271-an

This supposedly worked for my Mac buddies. I spread word of the exploit around, but I have yet to confirm if it blocks all variations of the exploit. So if you're really worried, you can follow the link above and do as the top answer states. Otherwise, be safe and wait for a patch from Apple.

 

[Sebas613]

So, you're safe if you're running a windows 7 pc and sometimes use a VPN (not VPS), and have an iPhone?

*Hopes he understood it correctly*

 

[Noobmage]

I think the bug involves hackers running arbitrary code on *nix machines, but I don't know what kind of access they need because that information wasn't included in the news reports I read

Also, pretty much everyone should be worried, because, afaik, if a hacker can execute arbitrary code on a webserver, then they can make any website install viruses on users' computers


Edit: phones are probably OK

(Google's Android and Apple's iOS mobile OS's are also UNIX-like, but don't often use Bash, if ever.)

http://www.tomsguide.com/us/shellshock-osx-linux,news-19614.html

 

[Donald Duck]

Thanks bic boy rich.

Would 2factor protect me if I fell victim to this?

This.

Thanks for the warning though

 

Is iOS Safe?

 

[Zerion]

Thankyou

 

[Ericdizzle]

am i reading this a day too late?