[dayglored]

> Don't worry: I haven't included instructions on how to actually exploit it.

You mean like this?

prompt$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

It's no secret how to exploit it. It's freakin' TRIVIAL to exploit it. But first, you have to get to it. That's the hard part.

This is a tempest in a teapot. No less a tempest, but this is a LOT harder to arrange to exploit than HeartBleed.

I'm a System Admin with a few hundred servers and workstations to patch -- it's a nightmare. That's my job...

But meanwhile, the freakin' technology twats writing these headlines sound like the world is ending. It's not. They're just pimping for webpage hits.

You want to know where the world is ending, look up the news on Ebola...

[ErnBatavia]

Being a dinosaur who gave-up with keeping-up with tech, I enjoy hitting these threads....it’s like those ‘English as a Second Language’ courses for us old phocks.....I try to learn sumpin, but quickly realize I’m beyond the curve.

[GOPJ]

Thanks for sharing...