Brief Service Interruption - 25 Sep.

Moderator: Littlabit

User avatar
Rendus
Nekoconeko
Posts: 1665
Joined: Sun Jun 27, 2004 6:24 am
Contact:

Brief Service Interruption - 25 Sep.

Postby Rendus » Thu Sep 25, 2014 3:29 pm

Performed a security update, rebooted, PHP decided it didn't love me anymore and I had to fix some permissions. Yay.

User avatar
Ommina
Whee!
Posts: 3918
Joined: Tue Oct 04, 2005 1:26 pm
Location: ömniöüs

Re: Brief Service Interruption - 25 Sep.

Postby Ommina » Thu Sep 25, 2014 3:32 pm

Bash it with a stick!

User avatar
Rendus
Nekoconeko
Posts: 1665
Joined: Sun Jun 27, 2004 6:24 am
Contact:

Re: Brief Service Interruption - 25 Sep.

Postby Rendus » Thu Sep 25, 2014 3:35 pm

Funny enough, the security update was to fix a security flaw in bash - the command line/shell of choice for most Linux distributions. So I needed to bash bash with a stick.

User avatar
Tarvas
Whee!
Posts: 2025
Joined: Sat Sep 05, 2009 9:48 am
Location: Dead in a ditch

Re: Brief Service Interruption - 25 Sep.

Postby Tarvas » Thu Sep 25, 2014 3:36 pm

lol
Alan
I'm a Tank!
Image
Punked, Carvas, Harvas, Cayleb

User avatar
Ommina
Whee!
Posts: 3918
Joined: Tue Oct 04, 2005 1:26 pm
Location: ömniöüs

Re: Brief Service Interruption - 25 Sep.

Postby Ommina » Thu Sep 25, 2014 3:42 pm

That was kinda the whole point of the joke... le'sigh.

User avatar
Rendus
Nekoconeko
Posts: 1665
Joined: Sun Jun 27, 2004 6:24 am
Contact:

Re: Brief Service Interruption - 25 Sep.

Postby Rendus » Thu Sep 25, 2014 3:49 pm

Ah - Wasn't sure if you were aware of the vulnerability or not :P And the audience probably isn't.

The upgrade was precautionary anyway - nothing we use directly calls bash, SSH is typically outright disabled and runs on a non-standard port, etc. Eh. Whatevs, yo.

Fnord
Whee!
Posts: 195
Joined: Mon Aug 09, 2010 9:34 pm

Re: Brief Service Interruption - 25 Sep.

Postby Fnord » Mon Sep 29, 2014 6:30 pm

Don't lie Rendus, I know you're running a cgi interface back there somewhere, then making system() calls with unsanitized input!