{"id":16191,"date":"2014-09-29T15:00:00","date_gmt":"2014-09-29T15:00:00","guid":{"rendered":"https:\/\/grapevinemsp.com\/2014\/09\/29\/be-afraid-of-new-shellshock-exploit\/"},"modified":"2014-09-29T15:00:00","modified_gmt":"2014-09-29T15:00:00","slug":"be-afraid-of-new-shellshock-exploit","status":"publish","type":"post","link":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/","title":{"rendered":"Be Afraid of New Shellshock Exploit"},"content":{"rendered":"<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignleft size-full wp-image-3702\" src=\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2014\/09\/eye-300x225.png\" alt=\"eye-300x225\" width=\"300\" height=\"225\" \/>We told you this day would come, and so it has. Remember all the warnings about how vulnerable the internet of objects was, because they lack even the most rudimentary of protections? Most people read those warnings and shrugged it off. Today, however, we&#8217;re waking up to a threat several times larger than Heartbleed. Most at risk? All of those poor, defenseless internet objects.<\/p>\n<p>What Is Shellshock?<\/p>\n<p>Shellshock is a command level bug in the Bash command line for Linux systems. It&#8217;s an unintended back door that allows hackers to take total control over un-patched devices. On the day the bug was found and announced, work began immediately patching the 51{7e4ee7cd997d36f6dec43befd6b19c37edf0959bbf61766e988f901dd91e96d7} of the world&#8217;s internet servers vulnerable to it, but of course, it wasn&#8217;t in time. A botnet attack managed to take control of a few servers using the exploit. That&#8217;s fairly minor, however. There&#8217;s a reliable infrastructure to patch servers quickly, so the damage there, while bad, will be limiting. There&#8217;s a great amount of urgency to close the door on this exploit at least where servers are concerned.<\/p>\n<p>Even so, as of now, Google estimates that as many as two billion web pages could be at risk. That&#8217;s a significant chunk of the web. Yes, the door will get closed, but until it does, that&#8217;s an enormous risk, and because the hack is wormable, that means it can self-replicate, so it can spread very quickly. If it gets behind the firewall of any large network anywhere, it&#8217;s pretty much game over for that system.<\/p>\n<p><strong>We Have The Technology \u2013 Or Do We?<\/strong><\/p>\n<p>We are fortunate then, that there&#8217;s good infrastructure in place to handle server patching. That at least will mitigate the damage. However, there is one vast thing that has no infrastructure in place on which to put a patch. You guessed it. All those hundreds of millions of internet objects, and nearly all of them are vulnerable to this hack. Almost any of them can be taken over at will, at any time, by even a moderately skilled hacker, and once taken over, it can be nigh on impossible to get control back. Why? Because the overwhelming majority of those internet objects lack even the most basic network protections. Not only do we not have the means of patching them, but we can&#8217;t easily get control back if they get taken over by someone who doesn&#8217;t have your best interest at heart.<\/p>\n<p>At least with Heartbleed, all the hackers exploiting the bug could do was steal data. In this case, they can outright commandeer hardware, and of course, in the process of doing so, make off with not just some, but literally all of your data too.<\/p>\n<p>Attacks began in earnest just four and a half hours after the bug was announced. They are increasing in momentum. Right now, it&#8217;s a race against time, with server owners patching as fast as they can, trying to mitigate the damage. Even if they succeed in limiting the damage on the server side, all that&#8217;s going to do is cause the hackers to descend like wolves on the much more numerous collection of internet objects, for which there is little or no protection.<\/p>\n<p>We told you this day was coming, and now, it&#8217;s here. This is the first, but you can bet it won&#8217;t be the last. Are you prepared for it? How safe are your objects on the internet?<\/p>\n<p>If you are interested in more technical details of the exploit you can read about it here &#8211; <a href=\"https:\/\/lcamtuf.blogspot.co.nz\/2014\/09\/quick-notes-about-bash-bug-its-impact.html\" target=\"_blank\" rel=\"noopener\">https:\/\/lcamtuf.blogspot.co.nz\/2014\/09\/quick-notes-about-bash-bug-its-impact.html<\/a><\/p>\n<p><a href='https:\/\/sitesdev.net\/articles\/2014\/09\/29\/be-afraid-of-new-shellshock-exploit\/' rel='nofollow'>Used with permission from Article Aggregator<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>We told you this day would come, and so it has. Remember all the warnings about how vulnerable the internet of objects was, because they lack even the most rudimentary of protections? Most people read those warnings and shrugged it off. Today, however, we&#8217;re waking up to a threat several times larger than Heartbleed. Most [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.2 (Yoast SEO v22.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Be Afraid of New Shellshock Exploit<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Be Afraid of New Shellshock Exploit\" \/>\n<meta property=\"og:description\" content=\"We told you this day would come, and so it has. Remember all the warnings about how vulnerable the internet of objects was, because they lack even the most rudimentary of protections? Most people read those warnings and shrugged it off. Today, however, we&#8217;re waking up to a threat several times larger than Heartbleed. Most [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/\" \/>\n<meta property=\"og:site_name\" content=\"The Valley\u2019s Leading IT Company I Grapevine MSP\" \/>\n<meta property=\"article:published_time\" content=\"2014-09-29T15:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2014\/09\/eye-300x225.png\" \/>\n<meta name=\"author\" content=\"Cloudways\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cloudways\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/\"},\"author\":{\"name\":\"Cloudways\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828\"},\"headline\":\"Be Afraid of New Shellshock Exploit\",\"datePublished\":\"2014-09-29T15:00:00+00:00\",\"dateModified\":\"2014-09-29T15:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/\"},\"wordCount\":638,\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2014\/09\/eye-300x225.png\",\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/\",\"url\":\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/\",\"name\":\"Be Afraid of New Shellshock Exploit\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2014\/09\/eye-300x225.png\",\"datePublished\":\"2014-09-29T15:00:00+00:00\",\"dateModified\":\"2014-09-29T15:00:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#primaryimage\",\"url\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2014\/09\/eye-300x225.png\",\"contentUrl\":\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2014\/09\/eye-300x225.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/grapevinemsp.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Be Afraid of New Shellshock Exploit\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/grapevinemsp.com\/#website\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"name\":\"The Valley\u2019s Leading IT Company I Grapevine MSP\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/grapevinemsp.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/grapevinemsp.com\/#organization\",\"name\":\"Grapevine MSP\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"contentUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"width\":600,\"height\":159,\"caption\":\"Grapevine MSP\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828\",\"name\":\"Cloudways\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g\",\"caption\":\"Cloudways\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Be Afraid of New Shellshock Exploit","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/","og_locale":"en_US","og_type":"article","og_title":"Be Afraid of New Shellshock Exploit","og_description":"We told you this day would come, and so it has. Remember all the warnings about how vulnerable the internet of objects was, because they lack even the most rudimentary of protections? Most people read those warnings and shrugged it off. Today, however, we&#8217;re waking up to a threat several times larger than Heartbleed. Most [&hellip;]","og_url":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/","og_site_name":"The Valley\u2019s Leading IT Company I Grapevine MSP","article_published_time":"2014-09-29T15:00:00+00:00","og_image":[{"url":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2014\/09\/eye-300x225.png"}],"author":"Cloudways","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cloudways","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#article","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/"},"author":{"name":"Cloudways","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828"},"headline":"Be Afraid of New Shellshock Exploit","datePublished":"2014-09-29T15:00:00+00:00","dateModified":"2014-09-29T15:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/"},"wordCount":638,"publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"image":{"@id":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#primaryimage"},"thumbnailUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2014\/09\/eye-300x225.png","articleSection":["News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/","url":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/","name":"Be Afraid of New Shellshock Exploit","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#primaryimage"},"image":{"@id":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#primaryimage"},"thumbnailUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2014\/09\/eye-300x225.png","datePublished":"2014-09-29T15:00:00+00:00","dateModified":"2014-09-29T15:00:00+00:00","breadcrumb":{"@id":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#primaryimage","url":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2014\/09\/eye-300x225.png","contentUrl":"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2014\/09\/eye-300x225.png"},{"@type":"BreadcrumbList","@id":"https:\/\/grapevinemsp.com\/be-afraid-of-new-shellshock-exploit\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/grapevinemsp.com\/"},{"@type":"ListItem","position":2,"name":"Be Afraid of New Shellshock Exploit"}]},{"@type":"WebSite","@id":"https:\/\/grapevinemsp.com\/#website","url":"https:\/\/grapevinemsp.com\/","name":"The Valley\u2019s Leading IT Company I Grapevine MSP","description":"","publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/grapevinemsp.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/grapevinemsp.com\/#organization","name":"Grapevine MSP","url":"https:\/\/grapevinemsp.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/","url":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","contentUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","width":600,"height":159,"caption":"Grapevine MSP"},"image":{"@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828","name":"Cloudways","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g","caption":"Cloudways"}}]}},"_links":{"self":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/16191"}],"collection":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/comments?post=16191"}],"version-history":[{"count":0,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/16191\/revisions"}],"wp:attachment":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/media?parent=16191"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/categories?post=16191"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/tags?post=16191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}