[kevkrom]

“Worse” is subjective. It’s a more severe bug when it’s exploited, however being able to exploit it is more difficult.

In any event, “keep up with security patches” is always good advice.

[raybbr]

Ping

[ShadowAce]

[dayglored]

> Don't worry: I haven't included instructions on how to actually exploit it.

You mean like this?

prompt$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

It's no secret how to exploit it. It's freakin' TRIVIAL to exploit it. But first, you have to get to it. That's the hard part.

This is a tempest in a teapot. No less a tempest, but this is a LOT harder to arrange to exploit than HeartBleed.

I'm a System Admin with a few hundred servers and workstations to patch -- it's a nightmare. That's my job...

But meanwhile, the freakin' technology twats writing these headlines sound like the world is ending. It's not. They're just pimping for webpage hits.

You want to know where the world is ending, look up the news on Ebola...