Friday, 26 September 2014

Everything You Need to Know About the Bash Bug

Unknown  /  at  18:41  /  No comments

man_typing_on_mac_book_ap.jpg

Also Read Full Specs Of Micromax Canvas Nitro

Internet security experts are warning that a new programming flaw known as the "Bash Bug" may pose a serious threat to millions of computers and other devices such as home Internet routers. Even the systems used to run factory floors and power plants could be affected.
So, is it time to panic? Here are some common questions and answers about the latest security scare.
Q. What is the Bash Bug, and why is it a big deal?
A. The bug, also known as "Shellshock," is in a commonly used piece of system software called Bash. Bash has been around since 1989 and is used on a variety of Unix-based systems, including Linux and Mac OS X.
Devices that use Unix in some form include many servers, routers, Android phones, Mac computers, medical devices and even the computers that create Bitcoins. Systems running power plants and municipal water systems could also be affected by the bug, though security experts already recommend that these systems remain disconnected from the Internet to avoid opening them to such risks.
Bash is a command shell - "the thing you use to tell your computer what you want it to do," explains Christopher Budd, global threat communications manager at security firm Trend Micro. Thus, exploiting a security hole in Bash means telling your computer, or other systems, what to do.
Q. Why are people saying it's worse than "Heartbleed," the flaw that exploited security technology used by hundreds of thousands of websites?
A. While Heartbleed exposed passwords and other sensitive data to hackers, Bash Bug lets outsiders take control of the affected device to install programs or run commands.
On the other hand, Bash Bug might be harder to exploit. Heartbleed affected any system running OpenSSL, a common Web encryption technology. With Bash Bug, your system actually has to be using Bash, Budd said. There are multiple types of command shells, so even if Bash is installed, the system could actually be using a different one.
Q. It's been a quarter century since Bash came out, so why is the bug a threat now?
A. That's because someone - Stephane Chazelas of Akamai Technologies Inc. to be specific - just found it.
Heartbleed was around for more than two years before it was discovered.
Q. Should you be worried?
A. For now, the Bash Bug appears to be more of a potential nuisance than a major threat.
It's a more vexing problem for Mac owners. The Bash Bug makes it easy for hackers to take control of a Mac running on a public Wi-Fi network, such as one in a coffee shop or airport, said Chris Wysopal, chief technologyofficer of computer security firm Veracode.
At home, a hacker who takes control of an Internet router could consume so much bandwidth for online mischief that the owner gets hit with a huge bill from service providers that impose monthly data caps, said Dave Lewis, Akamai Technologies' global security advocate.

Also Read Datawind to Launch Rs. 2,000 Android Phone With Free Lifetime Internet

Another possible security problem: A hacker who seizes control of a vulnerable Web server might collect online passwords stored in databases, said Joe Siegrist, CEO of LastPass, a service that stores and protects passwords. The threat doesn't appear to be as high as with Heartbleed, however.
The Bash Bug could cause massive damage if it's used to create an Internet "worm" - lines of malicious computer coding that wiggle from one vulnerable server to the next. A worm that reaches pandemic proportions could bog down the Internet and even render some services inaccessible. At this point, a worm feeding on the Bash Bug looms as a theoretical threat.
Q. What can you do about it?
A. Everyday users can't do much right now, except to wait for manufacturers to release fixes for their products. Budd recommends applying the patches for routers, Macs and other devices as they come out.
Even if a fix is developed, getting it could be another matter. Budd expects that to be an issue with Android phones, because their manufacturers and carriers are often slow to push out the system updates that Google provides.
Of course, it always helps to run up-to-date security software on your devices.
Q. Should these recurring security breakdowns cause people to reassess society's ever-increasing dependence on the Internet?
A. Probably, given that the revelations about Bash Bug and Heartbleed surfaced within six months of each other. What's especially troubling about Bash Bug is that it's been hiding in plain sight for the past two decades, even as millions of more machines came online to widen the threat.
Furthermore, these risks are likely to escalate as people store more documents, photos, videos and even medical records over the Internet. At the same time, technology is expected to make it possible to plug just about everything imaginable into the Internet, be it coffee machines or automobiles.
We'll just have to live with technological risks. As Lewis noted, "We are already too far down the road to take a step back."






Also Read How to Download and Install iOS 8 on Your iPhone, iPad, or iPod Touch

NOTE: Feel Free To Comment....

Share
Posted in: , Posted on: Friday, 26 September 2014

0 comments:

About

This blog belong to all our youngster friendz, who believe in sharing their knowledge with others and want to try to hackin', crackin' , full version applications at free of cost.
you will found here valuable stuffs.

Labels

adf.ly blocked (1) android (109) Android and PC (19) android games (11) android news (3) android tricks (43) Antivirus (11) Anvsoft (1) apple (40) asha phones (1) avast (1) avast pro antivirus 8 2013 (1) avg (1) AVG pc tuneup 2013 full version (1) avira (1) blackberry (1) blogspot (2) body_language (1) bootable usb (1) Browsers (16) c cleaner pro + business (1) Cheatbook 2013 (1) Chetan Bhagat (1) compressor (1) crac (1) Crack (1) crack + keygen (2) cyberlink power2go full version (1) daemon tools 5.2 full version (1) daemon tools patch (1) defender (2) dictionary (1) direct link (1) DivX Pro 7 (1) Ebook (2) eset (1) etc (1) facebook (16) Firewall (2) free recharge tricks (1) free sms (1) FRUIT NINJA for windows full version (1) full version (8) Full Version MS Office 13 (1) GTA Sandreas (1) hack (4) hack pc (3) hacking using keylogger (1) hardware (1) hiDownload platinum 8 (1) how to (6) how to install .net (1) HTML (1) idm (1) idm crack (1) IDM full version (1) image editor (2) install .net in windows 8 (1) internet tricks (37) iPhone 5c (2) job (1) k j activator (1) kaspersky (2) keygen (2) leaked images (1) license key (1) manual updates (1) mediafire (1) MEDIAFIRE DOWNLOAD (2) mediafire link (2) mobiles (42) music player (1) nfs most wanted (1) Office 13 Activator (1) official site update (1) offline updates (1) patch (4) PC (3) pc customize (1) PC Drivers (2) pc games (15) pc games cheats (11) PC Software (152) PC tricks (146) PdaNET 3.50 (1) PDF (3) phone specifications (43) pic viewer (3) power iso 5.6 (1) premium zbigz account (1) problem with .net in windows 8 (1) review (11) reviews (2) Revolution 2020 PDF (1) science (2) sharebeast download (6) sharebeast link (2) symbian mobiles (2) tech knowledge (33) Tech News (343) tech reviews (146) Torrent To IDM (1) Tune-Up 2014 Full Version (1) Ubuntu Mobiles (1) video player (13) video tutorial (1) Web design (1) window 8.1 tricks (12) windows 8 activator (1) Windows 8 USB Installer Maker (1) windows phones (16) winrar 5 full version (1)
Copyright © 2014 SimplyGet. WP Theme-junkie converted by Bloggertheme9
Blogger templates. Proudly Powered by Blogger.
Related Posts with Thumbnails