You can use this page for testing: http://shellshocktest.com/
'This tool helps you to check if your server is vulnerable to CVE-2014-6271, also known as "ShellShock".'
Topic: Are Bitcoin exchanges safe after ShellShock ? (Read 1815 times)
is BTC-e affected by this?
I guess they hold the majority of their coins in cold storage... or they should anyway..
If they have CGI scripts that call /bin/bash then they were vuln, or if they had any library on their system that called bash it was only one unauthenticated GET req from being totally pwned.
If they are running GNU/Linux on their servers and have fully patched their servers they are not vulnerable (this is the most likely scenario).
If they are running GNU/Linux on their servers and have not patched their servers they are vulnerable.
If they are running Microsoft Windows Server on their servers they are not vulnerable.
If they are running Apple Server on their servers they are vulnerable (Apple has yet to issue any patches).
If they are running GNU/Linux on their servers and have not patched their servers they are vulnerable.
If they are running Microsoft Windows Server on their servers they are not vulnerable.
If they are running Apple Server on their servers they are vulnerable (Apple has yet to issue any patches).
After? They probably patched their Linux servers by now, but the problem existed for over 20 years, who knows if it was already exploited?
yeah trading became dangerous...
Any service involved with Bitcoin will never be safe.
The only thing they can do is keep the security spot on, and detect any security holes before hackers do.
The only thing they can do is keep the security spot on, and detect any security holes before hackers do.
No exchange is safe in my opinion, no matter how they harp on about their 100% security.
If Apache is affected, then practically very few websites are safe now, because Apache has become almost synonymous to web server. So if Apache is attacked, the result will be catastrophe including the banking systems and the heat on bitcoin exchanges will be negligible to that.
No exchange is safe in my opinion, no matter how they harp on about their 100% security.
I have read ShellShock opens up Apache vulnerability. AFAIK most of the Bitcoin exchanges are running on Apache. So are they just awaiting to be ripped off ?
p.s. If U dont know what is ShellShock, check here.
p.s. If U dont know what is ShellShock, check here.
Jump to: