{"id":176,"date":"2014-10-01T11:58:50","date_gmt":"2014-10-01T15:58:50","guid":{"rendered":"http:\/\/altimac.com\/?p=176"},"modified":"2014-12-01T18:09:24","modified_gmt":"2014-12-01T23:09:24","slug":"shellshock-and-awe-coming-around-the-bend","status":"publish","type":"post","link":"https:\/\/altimac.com\/2014\/10\/01\/shellshock-and-awe-coming-around-the-bend\/","title":{"rendered":"(Shell)shock and awe, coming around the Bend"},"content":{"rendered":"

ANOTHER WEEK, another set of crises for Apple to weather. On the heels of August’s celebrity photo iCloud hack<\/a> comes the Shellshock vulnerability, freshly discovered on Sep. 24 and rivaled only by this spring’s Heartbleed bug<\/a> as the Vulnerability With The Most Compelling Monicker so far this year. At virtually the same moment, reports of the new iPhone 6 Plus bending after spending an extended period of time in users’ pockets began to surface on various forums.<\/p>\n

Let’s begin\u00a0with Shellshock. Also known as the Bash bug<\/a>, it’s a legitimate issue present in most UNIX-based operating systems<\/a>, of which Mac OS X is one. The name “Shellshock” arises from the area of the vulnerability, specifically the Bourne Again Shell (bash), a program used to issue commands to the system. If the bug is present, an attacker could potentially take over control of the shell, and thus the entire operating system.<\/p>\n

FOR THE AVERAGE Mac user, however, it’s unlikely to become a real problem unless he or she has messed with some advanced UNIX settings from the command line. Still, Apple has taken it seriously and has issued downloadable patches (see end of article)<\/em> for Mac OS X 10.9, 10.8 and 10.7. A future OS X security update will push the proper patch to your Mac shortly if you don’t apply it now.<\/p>\n

There’s a way to test your Mac for the bug, but it involves using the Terminal app to run a UNIX command; if you’re all about that sort of thing, then check out Lifehacker’s instructions<\/a> and dive right in. Otherwise, just download and install the appropriate patch below (go to About This Mac<\/strong> from the Apple menu if you’re not sure which version of Mac OS X you’re using).Those of you still running OS X 10.6 are unfortunately out of luck, as Apple stopped issuing security updates for Snow Leopard late last year.<\/p>\n

ON TO THE iPhone 6 and the debate over whether, well, whether this whole “bendable” thing is worth debating. According to Apple, in a statement made to the Wall Street Journal<\/a> and other media outlets on Sep. 25th, the company has received only nine complaints of the iPhone 6 plus bending under normal use. On the other hand, a quick Web search reveals all sorts of references to angry users, YouTube videos of folks bending their phones until they snap, and most recently two 15-year-old boys who actually recorded themselves on video<\/a> bending–and breaking–an iPhone 6 Plus in the Norwich, CT Apple Store.<\/p>\n

Are\u00a0the new iPhone 6 models\u00a0particularly vulnerable to bending under normal use? The first few days of reports and YouTube videos were often compelling, but for the most part on the unscientific side, while Apple on Sep. 25th invited the medis to its “torture-test” facility<\/a> and demonstrated the various stress tests they perform on the iPhones to ensure durability, in an effort to show how tough the phones actually are.<\/p>\n

SO WHO TO believe? On September 26th, no less an authority than Consumer Reports weighed in on the debate by publishing the results of their own stress tests on not only the new iPhones, but the iPhone 5, LG G3, Samsung Galaxy Note 3, and HTC One (M8) as well. I’ll let you read the results<\/a> for yourself, but to sum up:<\/p>\n