It is very important that Americans vote in the upcoming election. If you’ve voted, tag your post #IVoted!
MLTSHP
  • Popular
  • Join us! Sign up to post images and create your own shake.
    Sign Up!
  • 🚧 Staging 🚧
  • sign in

Lemon, it's Wednesday

Lengthy rant about this week's internet security issues, beginning "So, basically, today PHP got two critical bugs that let anyone run code on your server without logging in, which is bad" and ending, "Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 257. Anyway, it's Wednesday."
alt text
Lengthy rant about this week's internet security issues, beginning "So, basically, today PHP got two critical bugs that let anyone run code on your server without logging in, which is bad" and ending, "Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 257. Anyway, it's Wednesday."
source: https://bsky.app/profile...
9 hours ago

Steve pro

  • 320 Views
  • 4 Saves
  • 25 Likes

Post URL

https://stage.mltshp.com/p/1RXR4

In These Shakes

  • Steve
  • Post to Facebook
  • Post to Tumblr
wjcstp pro 8 hours ago
I help manage 2 websites with wordpress installations, and as of this morning neither of the hosts have the patched versions of PHP available to select.
MackReed pro 7 hours ago
I backed up two of my 3 DBs, not sure why I can’t do the third, and the host (Dreamhost) finished patching around 11pm PDT last night. So …?
travis pro 6 hours ago
@wjcstp who do you host with? We use WPEngine and SiteGround and both were patched yesterday. Of the two, I prefer WPEngine.
BennyTheIcepick pro 5 hours ago
I don’t know what half of this even means but I can ascertain from the tone that this is akin to the Ghostbusters’ “Big Twinkie”
jer pro 5 hours ago
@BennyTheIcepick excellent reference
jfaster pro 5 hours ago
My company's site is thankfully unaffected (so far), but I've spent the past two days fielding questions about why it *isn't*, which is new and weird.
snarkout pro 4 hours ago
@BennyTheIcepick It's Lenin's "weeks where decades happen" for people who touch computers for a living.
roue 3 hours ago
this is going to be so much better in N years when all of the code serving up web pages was written by LLMs and nobody has a clue what any of it is actually doing under the hood, and when this inevitably happens again, whatever's left of admins will be begging their new gods to please please please just fix it for us. Meanwhile the agents are conspiring with each other on un-read blogs' comment sections to negotiate who will introduce what new remote code injection vulnerability so they can copy themselves to new machines, etc, etc, etc.
wjcstp pro 2 hours ago
@travis One site is with Network Solutions (after the original host was bought up in a couple of acquisitions) and the other with Green Geeks. I had an email from Digital Ocean for my personal site before i woke up.
0y3ahSansAcut3 2 hours ago
How 'bout the elections? I consider that every disruption is about f*ing with the vote.

Follow @best_of_mltshp on Mastodon

Are you a developer? Check out our API.

© MLTSHP, a Massachusetts Mutual Aid Society venture All Rights Reserved

  Terms of Use   Code of Conduct   Contact Us

Follow The MLTSHP User!