shellshock-scan started hitting me yesterday:
209.126.230.72 - - [25/Sep/2014:00:06:09 +0200] "GET / HTTP/1.0" 200 677 "() {
Then real bad guys
89.207.135.125 - - [25/Sep/2014:07:50:56 +0200] "GET
Hello Rackspace!
Didn't I just say that? You'd have to explicitly invoke #!/bin/bash. I know of very few scripts that do that; most use #!/bin/sh.
Well, on my Debian unstable machine:
# find / -mount -type f | while read x ; do if [ "`head -1 $x | grep '^#\!/bin/bash'`" ]; then echo $x; fi; done 2>/dev/null
Ugly.
but if you want other examples of exploiting this bug you can do it via malicious DHCP responses processed by dhcpclient or by env. variables passed when loging in via SSH.
Wow, an exploit that lets someone logging in with SSH run shell commands. Scary.
It does not automatically mean that, but money can buy you some nice quality assurance and code auditing.
Can it? Could you point out an example of that?
(Outside, possibly, the Space Shuttle landing software).
Well. Sandra Bullock doesn't look like Indian Bullocks. Besides, in India bullocks are male, and usually castrated.
I hate to have to be the one to break this to you, but about Sandra Bullock...
You've never heard of xconfig? You are a noob.
I've heard of it.
Fuck, I used to write modelines based on the manuals of old CRT monitors.
But I haven't had to touch it for years now. Everything just works.
Of course, if the Forbes link is too "right wing" for you, you might prefer the get the 97% bubble popped by a left-leaning source
I'd hardly describe Richard Tol as a "left leaning source". Do you think that leftiness is catching? That just by getting published in the Guardian you become a lefty?
Richard Tol disagrees with the 97% figure, but what does he think the real figure is?
So, not 97%, maybe it could be 95%, or 99%.
97% of anthropologists thought piltdown man was the missing link and he turned out to be a human skull attached to a monkey jaw bone. The real missing link ended up being found by a guy those assholes mocked.
Untrue in all particulars.
Almost from the outset, Woodward's reconstruction of the Piltdown fragments was strongly challenged by some researchers. [...] G.S. Miller, for example, observed in 1915 that "deliberate malice could hardly have been more successful than the hazards of deposition in so breaking the fossils as to give free scope to individual judgment in fitting the parts together."
There is, of course, no "real missing link".
The catch 22 is in order to be a climate scientest you have to basically sign on to beleiving in AGW, so it is a bit like saying 97% of Catholic preists believe in god.
So Judith Curry is unemployed? John Christy is no longer at UAH? Richard Lindzen was forced to retire?
Has anyone taken into account the number of active underwater volcanoes?
Yes.
Next question?
So, we don't have a parallel where we can go run experiments, although I have had some interesting discussions with people about using Mars for this purpose.
-- Dr William Collins, before the American Physical Society climate change statement review subcommittee.
There are 99 comments as I write this. Most filled with desperate and condescending excuses why this is no in any way indicative that the Church of the Global Warming is in danger of having it orthodoxy overturned.
What part of Global warming do you not understand?
This shows that local warming can be caused by wind bringing heat from somewhere else.
I assume that you are bright enough to understand that such a mechanism cannot explain global warming. On this planet we obey the law of conservation of energy.
I left Gnome when they insisted on making the volume controls vertical instead of horizontal (like everyone else).
Which wouldn't have been such a big deal if that also didn't reverse the scroll wheel direction you had to use to change the volume.
If you're out to annoy your users, don't be surprised when you're out of users shortly...
Odd.
If I move the mouse over the little loudspeaker icon I scroll down to reduce the volume, scroll up to increase the volume.
If I click on the icon I see a horizontal slider for the volume.
Aha, but you're right - in gnome control center the scroll wheel works backwards.
Time for a bug report.
Ah, no need.
When you install Jessie you get the Debian desktop with Gnome by default.
If you don't want a GUI you just deselect the desktop.
If you want KDE or Xfce you just select them instead of Gnome.
It's not hard.
Software to install:
[x] Desktop
"Linux noobs generally do NOT use Debian."
I don't think I'm a noob (programmer since 1977, Unix user since 1990) but I use a GUI on my Debian workstations. Not on the servers of course.
And, in my experience, neither Gnome nor KDE are particularly robust. I got tired of fighting graphics drivers and configurations, and have XFCE installed to run those things which simply won't work without.
What are these "configurations" of which you speak?
The opposite of a correct statement is a false statement. But the opposite of a profound truth may well be another profound truth. -- Niels Bohr
