"ShellShock" - what are you doing?

[J. Landman Gay]

On 9/27/2014, 4:58 PM, Bruce Pokras wrote:
> Some of the articles about the vulnerability make it sound like every
> Mac on the planet could be taken over by bad guys. Talk about
> spreading FUD!

Yeah. I think a lot of servers will be in trouble, but fewer consumers 
than the media makes it out to be. I have discovered:

Android doesn't use a shell at all.
iOS probably doesn't use a shell (but the article wasn't certain.)
OS X isn't affected unless you're running a web server.
Windows isn't affected.
Most routers don't use bash because it is too large to fit into their 
relatively small amount of flash memory. (D-Link has a statement saying 
none of their routers use bash.)

So it seems to me that Apache servers and 'nix users need updating but 
other consumers are for the most part okay, including mobile users.

-- 
Jacqueline Landman Gay         |     jacque at hyperactivesw.com
HyperActive Software           |     http://www.hyperactivesw.com