On: Easy, realtime, system-wide Shellshock monitoring

[kaivi]

I guess there are already worms around, exploiting this bug.

Thus, has somebody thought of exploiting and patching the attackers in response?

[daveloyall → kaivi]

I haven't studied a worm in years, but historically it's been common practice to close the door you came in through upon entry, for exactly this reason.

Common, but by no means ubiquitous.