"ShellShock" - what are you doing?

[Rick Harrison]

Hey there,

How come if I run:

env x='() { :;}; echo Not vulnerable' bash -c "echo this is a test”

I get:

Not vulnerable

Is this a c/bash joke or what?

I also went to the real website for Homeland Security:  http://www.dhs.gov/news

There is absolutely nothing about any vulnerability in bash in the news there!

Stop spreading bogus rumors!

Rick



On Sep 25, 2014, at 2:40 PM, Richmond <richmondmathewson at gmail.com> wrote:

> env x='() { :;}; echo vulnerable' bash -c "echo this is a test"