Sep 26 2014

Shell Shock Vulnerability and Bash Patch

Given that Bash 3.2 (the version shipped by OSX) is vulnerable to the remote execution exploit known as “Shell Shock” (CVE-2014-6271 and CVE-2014-7169), many are asking how do I rebuild Bash and secure my system ahead of an official Apple patch?

I found the answer over at StackExchange.  Follow the instructions whether you use the native Bash, Homebrew, or MacPorts versions.

You can determine if you are vulnerable to the original problem in CVE-2014-6271 by executing this test:

$ env x='() { :;}; echo vulnerable' bash -c 'echo hello'
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
hello

The above output is an example of a non-vulnerable bash version. If you see the word vulnerable in the output of that command your bash is vulnerable and you should update.

Permanent link to this article: http://ericsilva.org/2014/09/26/shell-shock-vulnerability-and-bash-patch/

Jul 06 2014

Automatically Set $GOROOT variable with Homebrew

If you are using Go with Homebrew on OSX, add this to your ~/.profile or ~/.bash_profile to set the $GOROOT automatically:

GOVERSION=$(brew list go | head -n 1 | cut -d '/' -f 6)
export GOROOT=$(brew --prefix)/Cellar/go/$GOVERSION

Permanent link to this article: http://ericsilva.org/2014/07/06/automatically-set-goroot-variable-with-homebrew/

Jun 05 2014

Checking out X-Games Austin

Checking out X-Games Austin

Permanent link to this article: http://ericsilva.org/2014/06/05/checking-out-x-games-austin/

Jun 05 2014

Camera Not Working on Mavericks

I had an issue after upgrading to Mavericks where Photo Booth, Facetime, and Skype could not detect my camera, and kept telling me there were no connected cameras.

I found a fix on the Apple discussion forum that works, and I will share for anyone else that might be affected:

  • Quit all open apps that may try to use the FaceTime camera
  • Open Terminal, found in the /Applications/Utilities directory in OS X
  • Enter the following command string exactly, then hit return:
  • sudo killall VDCAssistant
  • Enter the administrator password when requested, this is required to execute a command with superuser privileges as prefixed by sudo
  • Relaunch the app that was attempting to use the camera

Permanent link to this article: http://ericsilva.org/2014/06/05/camera-not-working-on-mavericks/

Jun 05 2014

Hilton Austin Ballroom

Hilton Austin Ballroom

Permanent link to this article: http://ericsilva.org/2014/06/05/hilton-austin-ballroom/

May 02 2014

Getting ready to make some BBQ

Getting ready to make some BBQ

Permanent link to this article: http://ericsilva.org/2014/05/02/getting-ready-to-make-some-bbq/

Apr 20 2014

Great day at French Creek

Great day at French Creek

Permanent link to this article: http://ericsilva.org/2014/04/20/great-day-at-french-creek/

Apr 15 2014

Snowing in April

Snowing in April

Permanent link to this article: http://ericsilva.org/2014/04/15/snowing-in-april/

Mar 28 2014

Center ice at the Reading Royals game

Center ice at the Reading Royals game

Permanent link to this article: http://ericsilva.org/2014/03/28/center-ice-at-the-reading-royals-game/

Feb 14 2014

Our dad is so lame

Our dad is so lame

Permanent link to this article: http://ericsilva.org/2014/02/14/our-dad-is-so-lame/

Older posts «

Fetch more items