[ANN][DASH] Dash (dash.org) | First Self-Funding Self-Governing Crypto Currency

[TanteStefana2]

No, that's wrong. Finally check:

env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

It should return

bash: warning: x: ignoring function definition attempt

if everything is okay.

Bourne parser is fucked up, for how long?! 20 years?!

nope, it's not echoing, LOL

$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
vulnerable
this is a test

[Ignition75]

Hello, Guys, at this point we have reached our goal for the Open Source press release. The support was amazing, the release will go out next monday. We will have tracking tools to see how it performs this will give us good data to make adjustments for future releases. THANK YOU.

Fantastic work Minotaur!

[coins101]

http://www.coindesk.com/swiss-intelligence-service-investigates-paying-informants-bitcoin/

When the informants figure it out, it will be too late. Dead men walking.

[Propulsion]

nope, it's not echoing, LOL

$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
vulnerable
this is a test

Looks like it is. It should look like this:

Code:

:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test

:~$ 

Edit: Easier readability here: https://darkcointalk.org/threads/bash-bug-big-in-the-news.2480/#post-22353

[Ignition75]

http://www.coindesk.com/swiss-intelligence-service-investigates-paying-informants-bitcoin/

When the informants figure it out, it will be too late. Dead men walking.

Heh, not much of an intelligence service if they don't know either of the following:

1) Using Bitcoin is like wearing a G-String and sun-baking on a busy beach (thanks GeorgeM - Memory Burn)
2) Secret agents prefer the Dark 

[thelonecrouton]

No, that's wrong. Finally check:

env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

It should return

bash: warning: x: ignoring function definition attempt

if everything is okay.

Bourne parser is fucked up, for how long?! 20 years?!

nope, it's not echoing, LOL

$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
vulnerable
this is a test

All I did on my Amazon MN's was run 'sudo apt-get install bash' - came back with 4.3.11 and passed the echo test.

[TanteStefana2]

Looks like it is. It should look like this:

Code:

:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test

:~$ 

Edit: Easier readability here: https://darkcointalk.org/threads/bash-bug-big-in-the-news.2480/#post-22353

Yah, I don't know why it won't update.  I even changed the sources.  The problem is probably on my end.... just gotta keep at it I guess?  I've rebooted again, still no joy.  version number says 4.2.45(1)

crouton, that's all I had to do on my other node.  they should be exactly alike, the two nodes.... hummmm

[thelonecrouton]

http://www.coindesk.com/swiss-intelligence-service-investigates-paying-informants-bitcoin/

When the informants figure it out, it will be too late. Dead men walking.

Heh, not much of an intelligence service if they don't know either of the following:

1) Using Bitcoin is like wearing a G-String and sun-baking on a busy beach (thanks GeorgeM - Memory Burn)
2) Secret agents prefer the Dark 

We should be sending press releases to Langley, MOSSAD, GCHQ etc. - sod useless crypotoblogs.

[coins101]

Come over to the DarkSide, Litecoin miners.

[thelonecrouton]

Looks like it is. It should look like this:

Code:

:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test

:~$ 

Edit: Easier readability here: https://darkcointalk.org/threads/bash-bug-big-in-the-news.2480/#post-22353

Yah, I don't know why it won't update.  I even changed the sources.  The problem is probably on my end.... just gotta keep at it I guess?  I've rebooted again, still no joy.  version number says 4.2.45(1)

crouton, that's all I had to do on my other node.  they should be exactly alike, the two nodes.... hummmm

Are your instances in Ireland? Those paddy bog trotters may be a bit slow on the updates.

[_evolution_]

seems like the bash bug is not even solved with newest bash: https://bugzilla.redhat.com/show_bug.cgi?id=1141597#c23

Come on... The same shit again (Nevertheless, thank you for the update.)
What if $SHELL=/bin/ksh (KornShell)?

[coins101]

If you silent viewers were wondering....the answers is: yes!

If you buy your DRKs with credit cards or some other tracked service, once you spend your DRKs you won't be tracked to death by Big Brother.

[thelonecrouton]

seems like the bash bug is not even solved with newest bash: https://bugzilla.redhat.com/show_bug.cgi?id=1141597#c23

Come on... The same shit again (Nevertheless, thank you for the update.)
What if $SHELL=/bin/ksh (KornShell)?

It's not clear reading that link whether it's just the RH fix that's incomplete.

edit: nope, 4.3.11(1) is still vulnerable to the examples posted.

Code:

ubuntu@ip-172-31-23-218:~$ bash --version
GNU bash, version 4.3.11(1)-release (x86_64-pc-linux-gnu)
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>

This is free software; you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
ubuntu@ip-172-31-23-218:~$ env -i  X='() { (a)=>\' bash -c 'date'
bash: X: line 1: syntax error near unexpected token `='
bash: X: line 1: `'
bash: error importing function definition for `X'
ubuntu@ip-172-31-23-218:~$ ls -l date
-rw-rw-r-- 1 ubuntu ubuntu 0 Sep 25 22:53 date

edit: now, how do I undo whatever I just did? 

[ruleland]

if anyone is having problems updating bash with apt-get update / apt-get install bash, your sources.list might be missing an entry

i think all you need is:
deb http://nl.archive.ubuntu.com/ubuntu/ precise-updates main restricted

change nl to a repository near you. and "precise" with your version (copy those from another line)

the sources.list is probably in the /etc/apt directory

[TanteStefana2]

Looks like it is. It should look like this:

Code:

:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test

:~$ 

Edit: Easier readability here: https://darkcointalk.org/threads/bash-bug-big-in-the-news.2480/#post-22353

Yah, I don't know why it won't update.  I even changed the sources.  The problem is probably on my end.... just gotta keep at it I guess?  I've rebooted again, still no joy.  version number says 4.2.45(1)

crouton, that's all I had to do on my other node.  they should be exactly alike, the two nodes.... hummmm

Are your instances in Ireland? Those paddy bog trotters may be a bit slow on the updates.

nope, northern cali and I just upgraded my distro, but still no joy.  Why always me?  ROFLMAO

[thelonecrouton]

nope, northern cali and I just upgraded my distro, but still no joy.  Why always me?  ROFLMAO

The 'fix' doesn't work anyway it seems...

[AizenSou]

I doubt anyone here is more of a newbie than I am with Arch Linux. I have been playing with it for less than a week. This morning heard about the bash bug, ran the test, and yes I was vulnerable. Hmm... heard how easy Arch is to update so for the first time ran "sudo pacman -Syu"  

BOOM--vulnerability gone.  Way to go Arch.  I'm starting to like this...

I played with Arch, never could get used to it. I'm still do "emerge world -uND" [take a nap]

That sure brings back some good memories! Stage 1 FTW!
Thanks  

+1 good to see people still using gentoo. too bad their best times are over. for now I'll stick with arch, too.

My whole clusters and clients are all in gentoo It's really a nightmare.

[TanteStefana2]

If you silent viewers were wondering....the answers is: yes!

If you buy your DRKs with credit cards or some other tracked service, once you spend your DRKs you won't be tracked to death by Big Brother.

Yes, to legally (and for the most part, safely) purchase cryptos, the exchanger must have your confirmed identification.  However, once ya got 'em, you can keep 'em perfectly safe from prying eyes via Darkcoin and DarkSend!  Why use anything else?


BTW, I'm just going to wait until things settle down with this bash thing.  Knowing my luck, the repositories were pulled just after I updated the first instance or something crazy like that, LOL.  I'll just make a new instance if I can't get any love later   Thanks for all the help guys!!!

[thelonecrouton]

I doubt anyone here is more of a newbie than I am with Arch Linux. I have been playing with it for less than a week. This morning heard about the bash bug, ran the test, and yes I was vulnerable. Hmm... heard how easy Arch is to update so for the first time ran "sudo pacman -Syu"  

BOOM--vulnerability gone.  Way to go Arch.  I'm starting to like this...

I played with Arch, never could get used to it. I'm still do "emerge world -uND" [take a nap]

That sure brings back some good memories! Stage 1 FTW!
Thanks  

+1 good to see people still using gentoo. too bad their best times are over. for now I'll stick with arch, too.

My whole clusters and clients are all in gentoo It's really a nightmare.

Gentoo taught me a lot. Mostly, that the seconds of my life were too precious to waste watching all that crap scroll by.

[coins101]

Monday.