What ‘Shellshock’ means to you and me

<p class=”summary”>A Linux/Unix-based vulnerability, Shellshock, has an impact that reaches far beyond one operating system.</p>

<p class=”summaryPlain”>As with Heartbleed, Windows users can’t ignore this threat. But the most difficult aspect of this outbreak is determining which devices are actually vulnerable.</p>

<h2>A vulnerability in the Bash Linux/Unix shell</h2>

<p>Your PC might be pure Windows, but chances are high that you have devices in your home running on Unix or Linux. I know I do &#8212; my Western Digital My Cloud networked backup drive, routers, Kindles, iPhones, and iPads all run some form of Unix/Linux. (Worse still, Unix and Linux are core operating systems on many enterprise-computing and storage systems.)</p>

<p>Those non-Windows devices were relatively safe from malware &#8212; until now. As has been widely reported, the GNU Project’s Bourne Again Shell (Bash; <a href=”http://en.wikipedia.org/wiki/Bash_%28Unix_shell%29″>more info</a>) was found to be vulnerable. Bash is a text-based, command-line utility or Unix shell used by numerous versions of the Linux/Unix operating systems.</p>

This article is part of our premium content. Join Now.

Already a paid subscriber? Click here to login.

= Paid content

All Windows Secrets articles posted on 2014-10-07: