Writer: Brett Stelmaszek Editor: Catlin Stevenson Music by: @UFD-Music The internet internet is at risk right now and a bunch of sites are just shutting down instead of risking being hacked. PHP is a programming language used on nearly every corner of the world wide web that you interact with and there were two massive vulnerabilities announced that have to be patched ASAPP. Ranking 9.2 out of 10 on the severity scale, the PHP2Shell exploit allows for code to be remotely executed on PHP sites. And when it was announced, they said to expect mass attacks to start within 15 minutes of the release of the bulletin.
ADVERTISEMENT
Politicians will hear this and still go “yeah you still need to verify your personal data online”
As winston churchill once said: Fuck
Flash had the same problem for longer...
dev here, we're on emergency maintenance
Lets browser the web....WHY IS EVERYTHING ON FIRE?!
Is that why r34 and e621 went down for emergency matinence???
also, there's more to this story, including anthropic announcing the vulnerability publicly without contacting the people behind php and warning them. awful shaddy behavior
You can bet with backdoors like this that the NSA and other spook orgs already knew, and that certain hacker circles already knew as well, and have been using it for a while. I am reminded of the playpen scandal that resulted when the feds dropped the cases against the leader a p*dophile ring rather than reveal how they caught them. The federal prosecutors argued that revealing how they had hacked the darknet and the firefox browser it was built on was a threat to national security, and a federal judge agreed but said that the defenae attorneys still had to be told as not doing so would result in the defendants right to a fair trial being violated, but that as there was a legitimate national security concern the defense had to be told behind closed doors and kept under a gag order, and after that ruling the feds dropped the case rather than reveal it to the defense. You know. So they could keep using the exploit to protect our national security by not prosecuting p*edophiles. Yeah. The public was less than thrilled
"Php still alive?" people are going to have a field trip with this
PHP and security vulnerabilities, name a more iconic duo
Even a certain green website and its subsidiaries shut down to not risk the history on those sites
I was wondering what the fck was going on with most of the sites
I read "PVP" at first and got so damn confused lol but I wish it was PVP instead of PHP 😫 we are so cooked
Shigure-Ui jumpscare 💢
Yeah this has been on forums for a while now as a way to infect and srpead bot networks
instead of announcing the vulnerability, wouldn't it be better to just fix it and let the hackers know later?
For others, it's an emergency. For hackers it's just a Wednesday. (PHP vulnerabilities are numerable, mostly because it's an old language, and if user input is not sanertized properly, getting an exploit to work is pretty simple.)
I'll wait until the fireship video
Fuck it time to tear down the old net and go full cyberpunk
Php got even cRaZieR