X10 Community Forum

💬General Category => General Discussion => Topic started by: dhouston on September 25, 2014, 11:06:31 AM

Title: yet another open sores security issue
Post by: dhouston on September 25, 2014, 11:06:31 AM

• http://www.zdnet.com/unixlinux-bash-critical-security-hole-uncovered-7000034021/

Once again, there is a major security hole (newly named Shellshock) that's gone undetected for two decades.

Title: Re: yet another open sores security issue
Post by: dhouston on September 27, 2014, 09:30:28 AM

Shellshock is getting major attention on a multitude of outlets. It's a serious problem but may not be easy to test for or fix since the vulnerability may exist in things like WiFi routers, IP cameras, etc. Here are links to some of the easiest to follow Shellshock articles...

• http://www.washingtonpost.com/blogs/the-switch/wp/2014/09/25/why-shellshock-is-bad-news-for-the-internet-of-things/
• http://blog.erratasec.com/2014/09/bash-bug-as-big-as-heartbleed.html#.VCQd-PldWSo

B:(

Title: Re: yet another open sores security issue
Post by: dhouston on October 15, 2014, 10:17:37 AM

This month's newly discovered ancient open sores vulnerability...

• https://plus.google.com/+igyaan/posts/JDf1fSfyaT7
• http://bits.blogs.nytimes.com/2014/10/15/poodle-bug-marks-third-major-security-flaw-discovered-this-year/?_php=true&_type=blogs&ref=technology&_r=0

I've never understood why open sores proponents would think making source code public would mean that flaws like these would be found and fixed by unpaid good-guy guardians. There's far more incentive for bad-guys who hope to make money by exploiting vulnerabilities like these.