os x

Bash Upgrade App for OS X

September 28, 2014 by chikorita157

I came up with a GUI interface within an hour and a half if you don’t want to mess with the command line. XCode and Command Line tools are required to compile the new version, but you can easily access the functions of the script without fishing though the terminal.

This application will upgrade Bash to 3.2.54(1)

Note: This only works on Snow Leopard or later. Gatekeeper must be disabled in order to run this app.

Update: 1.0.1 adds Sparkle Updater functionality, considering that there may be future patches for Bash since the fix is still incomplete.

Update 2: Apple’s update is still vulnerable by one of the bugs and two new shellshock related bugs has been discovered. To be fully protected, you should continue to compile your own using this app until Apple releases a final bash update.

The changelog is here since this front end will keep updating as new developments happen.

Download | Source Code

Automated Script to Patch Bash on OS X

September 25, 2014 by chikorita157

If you are not aware, there is a critical bug in Bash that causes an attacker to craft an attack using environment variables. While a partial patch has been released on Linux, Apple has yet to release a patch. However, there is a fix for it and I came up with a script to automate the process.

This will work on Mavericks. Mountain Lion might work with this patch. Do not run on Yosemite Beta since it uses a newer version.

bashupgrade.sh usage:

-c : checks if your version of bash is vulnerable by the bug.
-i : compiles and install patch.

Note: You must install XCode and Command Line Tools before executing this script. This script also has to be run as root.

When Apple releases an official patch, please install that and verify.

Note: The script has been upgraded to patch CVE-2014-7169 with additional checks.

Update: Fix will work in Leopard (as long XCode 3.1.2 is installed), meaning it will work in Snow Leopard and Lion as well.

Before:

After:

…

Wirecast and Hitbox.tv

August 7, 2014 by chikorita157

Since Twitch.tv decided to change their rules, which caused a lot of controversy, people are wondering how do you stream to Hitbox.tv with a Mac. There is a program called Wirecast, but you need to change some settings to make it work. Here are the screenshots of how the settings should be like.

Address should be: rtmp://live.hitbox.tv/push

Stream is your stream key

Preset is this (you need to create a custom one):