Hacker Newsnew | past | comments | ask | show | jobs | submit | ryangripp's commentslogin

The fact the post was shared on Google Plus speaks volumes.


Would you like to expand on that comment? What does it mean when a post is shared on Google plus?


I think he means it contains a pro-google / anti-apple sentiment.

So getting back to shellshock on OSX...

Is there a patch available?

yes.

Does it download via a GUI?

no.

Is it about the same level of effort to patch a OSX box as a GNU/Linux box?

yes.

Does the post go wildly offtopic to address issues (iCloud) that are likely wetware hacks? yes.

Does it recommend carte blanche to not use apple products because their OS is fully patched? yes.


Um... the effort I had to take to patch my linux boxes was: Do nothing. (security fixes had been released and installed before I learned of the bug).

The effort I'll have to take to patch my Mac is:

* Download a new bash.

* recompile it

* install it by hand.

(and this is assuming I already have xcode/developer tools installed).

Not quite the same level of effort.

Is the article wildy off topic? Not really - its an article about yet another instance of Apple ignoring security issues, why wouldn't a previous example be relevant?


What is the software vulnerability used for the iCloud hack?


Is your position that a software vulnerability the only type of security issue? Is your position that ignoring software vulnerabilities is fundamentally a different thing than ignoring other types of security issue? I'm confused by why you are asking.


About the same level of effort?

Linux: apt-get install bash

OS X: Install xcode, install xcodetools (CLI), download bash source code from a mostly-undocumented URL (need to search through apple support forums), download and manually apply patch from GNU. Build bash, manually copy build output into /bin.

Yeah, totally the same level of effort.


You can install the Xcode CL tools without installing Xcode. The two were separated a couple years ago.


Did you mean to say 'brew upgrade bash'?


That doesn't change the version of bash pointed at by /bin/sh which is a hardlink to the OSX supplied bash. Even if you previously relinked /bin/sh to a homebrew bash, it won't change versions by upgrading the installed bash.


I suppose if you're being brave, you can nuke the built-in bash and symlink it back to brew's copy.


Which volumes are those?


Wiesmann's "Treatise on Tinfoil hats", volume one through three.


Now we just need a Honeybadger Firefox edition


Yeah...I won't touch it with a facebook login.


http://xkcd.com/927/


You're going to continue to see major eCommerce players offer bitcoin as a payment option. In the checkout flow it is best practice to offer as many payment options available because it increases the likelihood of a successful conversion.

Regardless of whether Andreesse's essay is correct regarding bitcoin two IR100 sites is a pretty big deal for bitcoin.


>> In the checkout flow it is best practice to offer as many payment options available because it increases the likelihood of a successful conversion.

Are you sure about that? Too many choices sometimes leads to no choice at all. [0]

[0] http://www.ted.com/talks/barry_schwartz_on_the_paradox_of_ch...


Exactly. See also: http://en.wikipedia.org/wiki/Buridan%27s_Ass


command + c = fail


I don't have a mac. I was too lazy to get someone else's to test this. But I'm sure people reading can figure out how to get it working on macs :)


This is awesome! However, 95% of my guests would be soo confused and we probably would receive a lot of phone calls/emails asking helpdesk questions.

"How does this work" "So we tried the website and we wanted to let you know we will be coming..."


Maybe it was the point. ;)


ha. nice


A lot of hard work by the team here, However, I agree with the comments---I rarely go to tech crunch anymore since the new design. Too much going on.


Somebody has a sense of humor: ispy@nsa.gov


I also like the following: root@nsa.gov, admin@nsa.gov, ghost@nsa.gov


I watched this movie about 13 times in the theaters---and finally someone figured it out! Way to go!


I must ask... What compelled you to watch a movie THAT many times in such a short period?


I would say the first three times were because I enjoyed the movie so much the other ten: I was obsessed with trying to figure out the ending.


13 times? Wow, you REALLY liked it eh


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: