Test for Shellshock (CVE-2014-6271) bash vulnerability

eanbowman@eanbowman:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test
eanbowman@eanbowman:~$

That’s what a patched bash shell should look like. To test your own, open up a console and type:

env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

If you see the line “vulnerable” returned, the trailing echo at the end of the function definition is being run and your bash prompt is vulnerable.

An update to bash is already available for most major distributions:

  1. Novel/SuSE
  2. Debian
  3. Ubuntu
  4. Redhat/Fedora
  5. Mageia
  6. CentOS

ALS Ice Bucket Challenge

A lot of videos are popping up on the Internet lately surrounding the ALS Ice Bucket challenge. What started as a silly way to raise awareness of the need for ALS research or be punished has actually led many people to both take up the challenge and donate.

Say what you will about those posting the videos, but know that they have raised about $5 million so far. The donations from this time last year were in the mid $30-thousands.

So cool off and hopefully donate to a great cause!

http://www.als.ca/ICEBUCKETCHALLENGE

Guardians of the Galaxy Dancing Groot HD

Marvel have released an official clip of Groot dancing. It’s interesting to see this particular part of the movie Guardians of the Galaxy gain so much attention. Groot has worked its way into the hearts of fans.

People are so moved by this scene that they have written DIY instructions on how to create your own dancing Groot.

I wonder how long it will be until Marvell makes their own version. The merchandising opportunity here is pretty obvious. Until then, we can enjoy what the fan community has to offer.

Dancing Groot Perfectly Looped

dancing-groot