News for hackers. Stuff that matters.

A comment on CVE-2014-7169: Bash Fix Incomplete, Still Exploitable. Parent comment

Re:CVE-2014-7169: Bash Fix Incomplete, Still Exploitable by daddykotex on Wednesday September 24, 2014 @11:37PM (#8365463)
I have a security warning from Chrome on my phone as of now. Maybe you want to look into that!
[ Parent | on HN ]
Re:CVE-2014-7169: Bash Fix Incomplete, Still Exploitable by daddykotex on Wednesday September 24, 2014 @11:49PM (#8365509)
https://www.dropbox.com/s/spigppz2hmya5ch/Screenshot_2014-09...
[ Parent | on HN ]
Re:CVE-2014-7169: Bash Fix Incomplete, Still Exploitable by nacs on Wednesday September 24, 2014 @11:46PM (#8365493)
No warnings about SSL on iPhone Safari. Are you on Android?

(Disclaimer: not affiliated with Sysward)

[ Parent | on HN ]
Re:CVE-2014-7169: Bash Fix Incomplete, Still Exploitable by namidark on Thursday September 25, 2014 @12:01AM (#8365551)
Thanks for the heads up - I'll take a look!
[ Parent | on HN ]
Re:CVE-2014-7169: Bash Fix Incomplete, Still Exploitable by cookiecaper on Thursday September 25, 2014 @02:06AM (#8365843)
If you use one of several popular cheap SSL providers, you need to add some intermediate certs to your server's SSL store or Android will show those warnings. It's pretty lame.

https://knowledge.rapidssl.com/support/ssl-certificate-suppo...

[ Parent | on HN ]