Shell shock - Bash bug

[Ralath]

The way you described it doesn't make it sound that bad, but all the articles make it sound really bad.

[Blaaaaaaaah]

Yeah. they keep saying it's bigger than heartbleed....

Heartbleed = affects more people but only steal data
Shell shock = affects less people but controls their devices??

I guess lol

[Vasu]

Hmm well it's not really bad for your devices is what I should say. In many ways it is worse than Heartbleed yeah.

With Heartbleed, people could make a server tell you what was in the RAM of the machine, and that could have been anything; something trivial like the date or maybe something more critical like the encryption keys they use. Basically there was a good possibility that something would get leaked but it wasn't in the control of the "hacker." With this bug though an outsider can actively give commands to the system and make it do things like run programs, delete files etc etc.

So yeah your personal devices are fine, but I guess it wouldn't hurt to do another round of password resets when the time comes.

[Lirange]

I thought this was going to be a video game.

[Hessah]

like Bioshock LOL

Thanks Vasu!