php situation 24h later
www.youtube.com
Some people say the php2shell fix is incomplete, while others say it's too hard to exploit. I look at both claims, explain the patch, and show how AI helped ...
  • stuner@lemmy.worldOPEnglish
    8·
    2 hours ago

    So it seems like it was rather easy for an IT security professional to create an exploit within 24h of the disclosure. Not sure if every script kiddy can do it, but this means that there are certainly malicious people/organizations who can.

    Ultimately, it seems to me that the only real choice is to patch our (public) systems ASAP these days.

  • Zwuzelmaus@feddit.orgEnglish
    6·
    2 hours ago

    I guess nearly everybody has installed the patch by now. Even myself :)

    Maybe we are going to see “scanner” websites for such patch situations in the future, with a world map and statistics where are how many unpatched servers…

    • stuner@lemmy.worldOPEnglish
      2·
      1 hour ago

      Yes, hopefully most people had time to install the updates. And maybe the false exploit reports helped slow down malicious people too.

    • Helix 🧬@feddit.orgEnglish
      5·
      2 hours ago

      Maybe we are going to see “scanner” websites for such patch situations in the future, with a world map and statistics where are how many unpatched servers…

      You mean things that already exist, like https://shodan.io/?

      • Zwuzelmaus@feddit.orgEnglish
        2·
        2 hours ago

        I don’t know. What does it tell about patches on servers (who don’t easily show their internals in such detail)?