Post

Can someone explain to me wtf PHO is

@neocities.org Um, are you aware of this?

TLDR we're not affected. I'll post an update soon.

It's rare to wake up and already be having a shit day at work but I guess this is one of them huh.

This one does strike me as a "your work is what wakes you up" tier 5 alarm fire if you work on anything important this is effected by

MSP life means "am I affected?" is basically a moot question because someone somewhere is and there's a high chance that it will become my problem eventually 😭

👋 Hey, ignorant question from a newbie webdev--my domain host has the capability of utilizing PHP, but my personal site is a static one which does not use PHP (as far as I understand). Should I assume my site is still compromised?

no. your site is not compromised; serving purely static files, or using a web server that does not run PHP code, means your site will not be affected.

Reall good to know, thank you! Fingers crossed for all those affected that nothing dire happens until patch time.

Anybody know what we should do if we have a WordPress site?

shut it the FUCK down and patch ASAP, YOU ARE DIRECTLY IN THE BLAST RADIUS.

I will look for a patch but if anyone knows where WordPress site people should go for such a patch and instructions on how to use it for even non-tech people (I'm somewhere in the middle), it would be very helpful!

I thought it only went up to 10 holy shit

it does only go up to 10, this is bad enough that people are joking about a hypothetical CVSS 11

in terms of 1 to log4shell how bad is that

if you are running a PHP application - it does not matter what it is - you are vulnerable. if you are running some embedded firmware that uses PHP to serve its web UI - you are vulnerable. full details and a patch at 2 PM UTC sharp tomorrow, you have been advised to prepare to patch immediately

the impact of this is going to be similar to the impact of Log4Shell except so much worse, because it doesn't require you to log anything and can be seemingly initiated completely remotely

i have managed to break the thread so reposting this: ONLY CURRENTLY IN-LIFE VERSIONS WILL RECEIVE FIRST-PARTY PATCHES. NO EOL VERSIONS WILL BE PATCHED. countdown til patches: time.is/countdown/14... cyberplace.social/@GossiTheDog...