How to determine if my system was compromised by the shellshock bug?

Is there any way to determine if my system was compromised / hacked? Is it enough to upgrade with "pacman -Syu" or should I reinstall the whole system?
Last edited by Bailando (2014-09-29 15:24:02)

The only way your system could have been compromised is if you or someone with access to your running system executed a Bash script that exploited the vulnerability. Which essentially means that in any instance in which a system was compromisd by this bug (and I'm not aware of any cases where that's actually happened) the bug itself isn't the primary security flaw.
Burning down your house because you suspect someone may have broken into it is ...well, I'm not sure there's a word to describe how extreme that response is relative to the threat. Especially if you're just going to rebuild the house and install the same locks you fear have failed you in the first place.
Last edited by ANOKNUSA (2014-09-29 16:06:41)

Similar Messages

FCPX: In Event Library: how to know if a video was used in the timeline of Final Cut Pro X?

In Event Library: how to know if a video was used in the timeline of Final Cut Pro X?
An example: In Premiere Pro, the whole video is added to the timeline identified as used in their video library. Facilitating our work on a big project, not to repeat videos. You can do this in FCPX?

The way it works in FCP:
Working from the Timeline Index, you can see lists of all clips in the sequence and their location in the timeline.
You can also do a search (kevn) to narrow the results.
Russ
hth.
Russ

How to recover my photo i was accidentally syn the ipad mini to other device

how to recover my photo i was accidentally syn the ipad mini to other device

I don't think recovery software will help since the file isn't just deleted, it's overwritten. If you want to try, the backups are located at one of these locations:
Mac OS: ~/Library/Application Support/MobileSync/Backup
Windows XP: %AppData%\Apple Computer\MobileSync\Backup
Windows Vista: %AppData%\Roaming\Apple Computer\MobileSync\Backup
Windows 7: %AppData%\Roaming\Apple Computer\MobileSync\Backup

How to determine if a document was duplicated

Hi everyone
I recieved a support call from one of our customers they claimed that there was some kind of error after the system hanged for 20 mins (reasons unknown so far),after SBO was responsive again, they noticed a duplicated document (A/R Invoice) but with different document number,i.e docnum=1000 and 1001, the same rows, same amounts,costumer, etc...
I decided to run a simple query to determine wheter it was in fact a system error or maybe the user clicked twice while the system was iresponsive triggering a second transaction to be posted.
"select T0.docnum,T0.doctime from oinv T0 where T0.DocNum = 'somedocnum' or T0.docnum='Nextdocnum')" .
Unfortunately the returned information is not very precise since it only shows the min it was created and i was expecting a second o millisecond kind of data but it showed that the documents where created at the same time (minute).
I would like to know if there is another way (more accurate) to determine what happened? before i present the issue to support desk,any idea or suggestion is highly appreciated.
Info:
SBO 2007A pl 15 (migrating soon to highest patch)
Windows 2003 Server R2 Enterprise Edition
Thanx in advance
Aley

Hi,
Can you please check whether you can getting any result from the Select query in Note No. [1241506|https://websmp130.sap-ag.de/sap(bD1odSZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=1241506] ?
Regards,
Jitin
SAP Business One Forum Team

HT4718 How do you uninstall programs that was downloaded on the internet

Hello everyone,
I have a MacBook Pro 13 13 inch 2012 mid and I learned how to use a Mac now but I just don't know if you can uninstall programs that was downloaded on the internet. If you do know how to uninstall programs please comment and let me know

You may find these articles helpful.
http://support.apple.com/kb/PH14299
http://www.thexlab.com/faqs/uninstallingapps.html

How to close an app that was downloaded from the apps screen?

How can I close an app that was downloaded from the apps store, and is still on my apps page?

Force close apps
1. Double tap the home button to bring up the multi-tasking view
2. Swipe the app's windows upwards to close
3. The app will fly off the screen
http://support.apple.com/kb/ht5137

How would you tell if there was damage on the inside?

I was just wondering, would there be any signs that if you dropped it, something was broken on the inside? Or is there nothing to really break on the inside?

The symptom is that it does not work right

How to check if your account was affected by the breach

A handy online tool to verify and check if your Adobe account was part of the Adobe breach:
http://adobe.breach.il.ly/
Mine was!
Now, why couldn't Adobe give us a similar service, and why is a third party offering this instead?
At least now I know for certain my Adobe ID is in the list of stolen passwords.

That is very generous of you! Personally, I would not be qualified to review your code, but the thought is welcome.
The concept of causing trouble then offering a solution is not new. Every person should take reasonable precautions to protect their information - especially since our information is so well catalogued now. The spam I get now is unnervingly targeted.
The downside is that people who are helping get looked at with suspicion too. Most of us are not equipped to tell whether a site like yours is white, gray or black.
Once again, I appreciate your willingness to provide assurances about your site.

IDSCS5.5 How to determine if a pageitem was copy/pasted from Illustrator

Hi,
My flow is as follows:
- Open document in IndesignServer
- (XML)Tag every pageitem with our custom IndesignServer plugin (c++ SDK)
- If pageItem is a group, tag every member separately
- save/close the document
My problem is:
- If pageitem was copy/pasted from Illustrator and pageitem has a gradient fill => IndesignServer crashes while tagging.
- Copy/pasted illustrator items with plain colorfills work fine.
Note that:
- Copy pasted pageitems from illustrator with a gradient fill are considerated as group in Indesign.
- The gradient fill of Illustrator is not recognized as such in Indesign ( I could only test with Illustrator CS4).
- The lack of color information in that situation is not enough to consider the object as "from Illustrator".
My question:
- How can i determine if the origin of the pageitem is Illustrator? (I have no control on the creation of the document).
I know this is a hard one...
Thanks in advance for any usefull input!
Bart Devos.

Hi,
My flow is as follows:
- Open document in IndesignServer
- (XML)Tag every pageitem with our custom IndesignServer plugin (c++ SDK)
- If pageItem is a group, tag every member separately
- save/close the document
My problem is:
- If pageitem was copy/pasted from Illustrator and pageitem has a gradient fill => IndesignServer crashes while tagging.
- Copy/pasted illustrator items with plain colorfills work fine.
Note that:
- Copy pasted pageitems from illustrator with a gradient fill are considerated as group in Indesign.
- The gradient fill of Illustrator is not recognized as such in Indesign ( I could only test with Illustrator CS4).
- The lack of color information in that situation is not enough to consider the object as "from Illustrator".
My question:
- How can i determine if the origin of the pageitem is Illustrator? (I have no control on the creation of the document).
I know this is a hard one...
Thanks in advance for any usefull input!
Bart Devos.

How to determine if my system Bios is 786G1?

I just received a HP dc7900 convertable minitower without an operating system and before I install the O/S I want to update to the latest BIOS and then install the latest Intel Management Software.
The latest Bios listed says to make sure that you have the 786G1 bios [HP Compaq Business Desktop System BIOS (786G1 BIOS)]
I currently have Bios version 1.16 installed and need to update it. How can I be sure that my system has the 786G1 bios?
Thank you for your help in advance...

This is a peer-to-peer user supported forum for HP consumer class products. HP maintains no official presence on this forum. It is unlikely that HP will respond in an official capacity. Any reply from a HP employee represents their own opinion and not that of HP's.
You should be able to locate the BIOS information on one of the informational screens in the BIOS. However, if you download the BIOS update and go to flash the BIOS, the flash routine should tell you (before it flashes the BIOS) whether or not the update is correct for the BIOS installed on your computer.
The HP Compaq dc7900 series of computers are business class computers and as such, your questions may be better answered in the HP Business Support Forum.
Please see HP Business Support Center - Get help from HP to contact HP directly with your support questions.
Please click the white KUDOS star to show your appreciation
Frank
{------------ Please click the "White Kudos" Thumbs Up to say THANKS for helping.
Please click the "Accept As Solution" on my post, if my assistance has solved your issue. ------------V
This is a user supported forum. I am a volunteer and I don't work for HP.
HP 15t-j100 (on loan from HP)
HP 13 Split x2 (on loan from HP)
HP Slate8 Pro (on loan from HP)
HP a1632x - Windows 7, 4GB RAM, AMD Radeon HD 6450
HP p6130y - Windows 7, 8GB RAM, AMD Radeon HD 6450
HP p6320y - Windows 7, 8GB RAM, NVIDIA GT 240
HP p7-1026 - Windows 7, 6GB RAM, AMD Radeon HD 6450
HP p6787c - Windows 7, 8GB RAM, NVIDIA GT 240

How to determine which fallback bundle was used?

Hello,
I have built a component that uses singleton factory classes to cache localized objects in that same factory. In the end the singleton factory either builds a new one or pulls from cache. The cached objects can be cached by keys like myObjectEN or myObjectENUS. If I use user locale to create these keys fallback situations are not handled properly. Example:
1.) I am only providing a _en bundle.
2.) A user who's locale is en generates an object twith en translations that us cached by key myObjectEN.
3.) A user who's locale is en_US falls back to en & generates an object with en translations that is cached by key myObjectENUS if I use the users locale, which isn't correct.
This results in the same object with english translations being cached twice by two different keys. I need my key to be drived from the resource bundle being used, and not the users locale, to cover fallback situations. Is there any way to do this?
Thanks!
Message was edited by:
DougSteckel

Thanks Marius.
The wdController.getApplication method doesn't exist, but if found that this did work:
wdComponentAPI.getApplication().getName()
thanks for send me off in the right direction.
Cheers,
faB
Message was edited by: faB

How do I setup my system to look like the other Arch user's?

I just finished installing Arch on my EeePC 100HA and I'm looking how to setup my system like other users have in their screenshots located here: http://bbs.archlinux.org/viewtopic.php?id=75154 . This one in particular: http://fc09.deviantart.com/fs45/f/2009/ … _haxit.png
I see that he's using some type of window manager like xmonad or openbox, but I can't really tell. He has links to all of his configuration files but I don't know where to paste them on my system. When I look at those config files, I get scared to even attempt this, but I really want a system as slick as that one, or like any of the amazing customized Arch systems I've seen around here.
Last edited by jwmollman (2009-07-02 06:44:18)

jwmollman wrote:
I just finished installing Arch on my EeePC 100HA and I'm looking how to setup my system like other users have in their screenshots located here: http://bbs.archlinux.org/viewtopic.php?id=75154. This one in particular: http://fc09.deviantart.com/fs45/f/2009/ … _haxit.png.
I see that he's using some type of window manager like xmonad or openbox, but I can't really tell. He has links to all of his configuration files but I don't know where to paste them on my system. When I look at those config files, I get scared to even attempt this, but I really want a system as slick as that one, or like any of the amazing customized Arch systems I've seen around here.
Remove the period from your 2nd URL. Else it won't work.
I see he is just using a conky and openbox[I guess] O_o

How can I know which link was clicked in the link list

Hi everyone
I'm using list of links in my page to display list of the files in some directory.
How can I know which link user was clicked. There are some code:
<%
String dir = "..//files//";
File fin = new File(dir);
File files[]=fin.listFiles();
for(int i=0;i<files.length;i++)
File x = files;
%>
<%=x.getName()%><br>
<%
%>
Please help

You need to pass some data on the querystring to the page you are linking to.
<a href="Main_Work.jsp?file=<%=x.getName()%>"><%=x.getName()%></a><br>
This will send a parameter called "file" with the value of the file name that the user clicked.
Now in Main_Work.jsp you can access this data as follows:
<%
String s = request.getParameter("file");
File f = new File("..//files//"+s);
%>

Content Location request for PACKAGE failed (Code 0x80040102) - How to determine list of DP's returned from the MP

Hi there
So, existing SCCM 2012 environment, OSD functioning at other sites, been in use for a while.
New location, new DP. PXE boot system, choose the task sequence, and I get the error that the package is not found.
Look at the SMSTS.log and sure enough I see the 0x80040102 error.
I have :
Removed the offending package and redistributed it. Verified it is present on the server.
Verified the boundary has the server as a site system.
Verified the boundaries have the correct IP range, and the correct Site.
I have tried it with just a Site boundary and just a IP Range boundary.
Created a copy of my TS, removed the offending package, deployed. Same error, just with a different package ID (which tells me that it isn't the package, it is something on the server DP itself).
Rebooted both the Site server and the DP.
I'm kind of at a loss, as I would expect to see the DP show up in the below log as a DP, but I don't see it. It looks like it gets policy, and it shows under the content location request Local: 1 (which I believe says it sees 1 local content location),
but further below in the log it says Processing 0 Locations.
Very confused.
Thanks for any help...
Content location request: TSPxe
8/26/2014 10:48:46 AM 1584 (0x0630)
Package : packageid.3 TSPxe
8/26/2014 10:48:46 AM 1584 (0x0630)
Client : c713c862-e9be-4f67-a6d3-f164e05c29a2
TSPxe 8/26/2014 10:48:46 AM
1584 (0x0630)
Local : 1 TSPxe
8/26/2014 10:48:46 AM 1584 (0x0630)
Remote : 0 TSPxe
8/26/2014 10:48:46 AM 1584 (0x0630)
Internet: 0 TSPxe
8/26/2014 10:48:46 AM 1584 (0x0630)
Sending RequestContentLocations for packageid
TSPxe 8/26/2014 10:48:46 AM
1584 (0x0630)
Setting message signatures. TSPxe
8/26/2014 10:48:46 AM 1584 (0x0630)
Setting the authenticator. TSPxe
8/26/2014 10:48:46 AM 1584 (0x0630)
CLibSMSMessageWinHttpTransport::Send: URL: siteserver.domain.local:80 CCM_POST /ccm_system/request
TSPxe 8/26/2014 10:48:46 AM
1584 (0x0630)
Request was succesful. TSPxe
8/26/2014 10:48:47 AM 1584 (0x0630)
::DecompressBuffer(65536) TSPxe
8/26/2014 10:48:47 AM 1584 (0x0630)
Decompression (zlib) succeeded: original size 99, uncompressed size 178.
TSPxe 8/26/2014 10:48:47 AM
1584 (0x0630)
Location Reply: <ContentLocationReply SchemaVersion="1.00"><ContentInfo/><Sites/></ContentLocationReply>
TSPxe 8/26/2014 10:48:47 AM
1584 (0x0630)
Processing 0 locations. TSPxe
8/26/2014 10:48:47 AM 1584 (0x0630)
LocationsList.size() > 0, HRESULT=80040102 (e:\qfe\nts\sms\framework\tscore\resolvesource.cpp,2142)
TSPxe 8/26/2014 10:48:47 AM
1584 (0x0630)
FALSE, HRESULT=80040102 (e:\qfe\nts\sms\framework\tscore\tspolicy.cpp,1863)
TSPxe 8/26/2014 10:48:47 AM
1584 (0x0630)
Content location request for packageid:3 failed. (Code 0x80040102)
TSPxe 8/26/2014 10:48:47 AM
1584 (0x0630)
hr, HRESULT=80040102 (e:\qfe\nts\sms\framework\tscore\tspolicy.cpp,2626)
TSPxe 8/26/2014 10:48:47 AM
1584 (0x0630)
Failed to resolve PackageID= TSPxe
8/26/2014 10:48:47 AM 1584 (0x0630)
(*iTSReference)->Resolve( pTSPolicyManager, dwResolveFlags ), HRESULT=80040102 (e:\qfe\nts\sms\framework\tscore\tspolicy.cpp,3412)
TSPxe 8/26/2014 10:48:47 AM
1584 (0x0630)
m_pSelectedTaskSequence->Resolve( m_pPolicyManager, TS::Policy::TaskSequence::ResolvePolicy | TS::Policy::TaskSequence::ResolveSource, fpCallbackProc, pv, hCancelEvent), HRESULT=80040102 (e:\nts_sccm_release\sms\client\tasksequence\tsmbootstrap\tsmediawizardcontrol.cpp,1523)
TSPxe 8/26/2014 10:48:47 AM
1584 (0x0630)
Failed to resolve selected task sequence dependencies. Code(0x80040102)
TSPxe 8/26/2014 10:48:47 AM
1584 (0x0630)
hrReturn, HRESULT=80040102 (e:\nts_sccm_release\sms\client\tasksequence\tsmbootstrap\tsmediaresolveprogresspage.cpp,445)
TSPxe 8/26/2014 10:48:47 AM
1584 (0x0630)
ThreadToResolveAndExecuteTaskSequence failed. Code(0x80040102)
TSPxe 8/26/2014 10:48:47 AM
1584 (0x0630)
ThreadToResolveAndExecuteTaskSequence returned code 0x80040102
TSPxe 8/26/2014 10:48:47 AM
892 (0x037C)
Setting wizard error: This task sequence cannot be run because the program files for packageid cannot be located on a distribution point. For more information, contact your system administrator or helpdesk operator.
TSPxe 8/26/2014 10:48:47 AM
892 (0x037C)

It was not just driver packages, it was whatever package was next in line in the Task Sequence.
The issue got even more strange...I added a DP from my central location to the boundary group of the site that was failing.
Now it pulls from the local DP.
If I remove the DP from my central location (that is not local to the failing site), then it stops working again.

How do I fix footage that was capture in the wrong format?

Hi there,
I want to edit footage that was supposed to be captured in 16.9. 720 x 480(1.2121) but once imported onto premiere pro cs4 looks like this
according to properties it was captured in 16.9. 720x480(0.9091)
How can I convert it to the first settings? 16.9 720x480(1.2121)
Please help.
Thanks,
Elio

The best way is to work in a 4:3 sequence. On an older square TV, it'll be 16:9 with black bars on top and bottom. On newer widescreen TVs, it'll be both letter and pillar boxed with black bars on all sides, in which case you set the TV to Zoom mode.

How to determine if my system was compromised by the shellshock bug?

Similar Messages

Maybe you are looking for