Bash 'shellshock' bug is wormable
Yep. We're currently <i>basically</i> waiting to see which completes first: a) a patch for bash which actually works gets released and then trickles into the various ways to get it on every machine in the world or b) someone writes ~10 lines of payload code (download rootkit, execute, connect to IRC channel, join botnet, etc) and then just hits everything in IP4 space with a for loop.  Optionally, the for loop gets distributed to new nodes joining the bot net.<p>If you cannot say "I run no Linux/Unix/MacOS/compatible/etc machine which connects other machines" you should be at battle stations right now.  We're all racing against a for loop and the for loop will probably have a head start.