yet another open sores security issue

[dhouston]

• http://www.zdnet.com/unixlinux-bash-critical-security-hole-uncovered-7000034021/

Once again, there is a major security hole (newly named Shellshock) that's gone undetected for two decades.

[dhouston]

Shellshock is getting major attention on a multitude of outlets. It's a serious problem but may not be easy to test for or fix since the vulnerability may exist in things like WiFi routers, IP cameras, etc. Here are links to some of the easiest to follow Shellshock articles...

• http://www.washingtonpost.com/blogs/the-switch/wp/2014/09/25/why-shellshock-is-bad-news-for-the-internet-of-things/
• http://blog.erratasec.com/2014/09/bash-bug-as-big-as-heartbleed.html#.VCQd-PldWSo

[dhouston]

This month's newly discovered ancient open sores vulnerability...

• https://plus.google.com/+igyaan/posts/JDf1fSfyaT7
• http://bits.blogs.nytimes.com/2014/10/15/poodle-bug-marks-third-major-security-flaw-discovered-this-year/?_php=true&_type=blogs&ref=technology&_r=0

I've never understood why open sores proponents would think making source code public would mean that flaws like these would be found and fixed by unpaid good-guy guardians. There's far more incentive for bad-guys who hope to make money by exploiting vulnerabilities like these.