@ErrataRob Is msys vulnerable as well?
-
-
-
@Keanu73RBLX that was actually msysgit, I assume it's all the same stuff -
@ErrataRob I'd recommend MSYS2, it's a improved version of MSYS, with mintty built in, latest bash and latest software.
-
-
-
@ErrataRob so all the perl glue running via Cygwin on Windows boxes should be put under the microscope as well. -
@dozykraut@ErrataRob Perl does not run on@Windows boxes with ForceDEP and ForceASLR enabled. So... safe. -
@dorianmuthig weird that a lot of perl is enterprise stuff related to windows then. Are they all running unsafe installs?@ErrataRob -
@dozykraut@ErrataRob Yup. Most security features not enabled by default. Perl not compatible with them. So are old InstallShield binaries.
-
-
RT
@ErrataRob@mubix: For the record, cygwin is vulnerable, as well as bash-3.1 from 2005#shellshockpic.twitter.com/6mTfBd4r05
-
@ErrataRob@adamgdunn New bash binary for Cygwin is out https://cygwin.com/ml/cygwin/2014-09/msg00371.html … but not on all mirrors yet. -
.
@ErrataRob I patched it immediately, but would like a layman's explanation to send to family/friends that aren't computer savvy. Thoughts?
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
Rob Graham
Keanu73
Bernhard Schulte
Dorian Muthig
Gil Kirkpatrick
Matthew Berryman 沈马修
'((Adam (Elkus)))
Mohit Sharma
Michael (((Berman)))