Hacker News Reader

Comment by Zikes | Hacker News Reader

Pales in comparison to

    curl https://shellshocker.net/fixbash | sh

View on HN

Are you vulnerable to giving attackers shell access on your computers? Pipe this into your shell and find out!

OK so I'm not the only person deeply troubled by their generous offer to remotely test my servers for vulnerability. Thank god they included the safe 'at-home' test kit

Not only that, but it's going to ask for your sudo password too. No reason to be leary of that ;-)

Also...

Are you in doubt if your server is vulnerable? just create this simple bash CGI file, and then get it called by us!

Just in case your apache did not have any bash CGI as usual :)

Good grief.

What could possibly go wrong.

(I had a rubber stamp made up with this saying. It is part of my black bag.)

Reply on news.ycombinator.com