A lot of people in techny internet spaces online are talking about a PHP embargo. What does that mean and what's going on?

you are viewing a single comment's thread
view the rest of the comments
[–] 18 points 5 days ago (8 children)

To be fair, it's quite a biggie.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 12 points 5 days ago (5 children)
  • [–] 4 points 5 days ago (1 child)

    But the outcome of the exploit is bad enough to outweigh the difficulty. Even if it's hard rce is something you don't what to leave open.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 5 days ago*

    i mean yeah, patch your stuff. but fact is there are no exploits available, because it only works on modified installs, and none of the pocs actually work in the wild.

  • source
  • parent
  • [–] 2 points 5 days ago (2 children)
  • [–] 7 points 5 days ago

    To be fair, it's quite a biggie.

    I remember a day when we had 4 major ssh Vulnerabilities in the same day. We were on advance notice because #OSVendor so we got them as they came in and went nuts.

    And each one that came in spawned another new effort of research, patch, test, roll, systest, releng, ship. It was all day, all-hands, every group, panic.

    Wait. Now I can't decide whether it was 2002 or 2003, because there were 2 days where that fucking happened.

    With openssh.

    Keep your pants on, right?

  • source
  • parent