Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #1915

Re: Ancient Linux servers blighted slum houses of the Internet

Show all headers | View raw

In message <suj00b-a45.ln1@squidward.local.dionic.net> 
  Tim Watts <tw_usenet@dionic.net> wrote:
> On 22/03/14 15:19, tdk wrote:
>> This is actually a vulnerability in PHP and nothing to do with Linux.

> PHP does seem to be the route to 90% of server hacks.

> I don't know if it is the fault of the language, or its popularity - 
> particularly in attracting the casual hacker rather than the seasoned 
> programmer.

It's a combination of things.

Primarily, it's its popularity and the fact that early versions of
php.ini made terrible security choices. Pretty much any minor bug in a
php web application led to remote exploits.

Current php is much better behaved unless some numpty admin mucks up
php.ini.

-- 
One tequila, two tequila, three tequila, floor.

Back to comp.misc | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Ancient Linux servers: blighted slum houses of the Internet RS Wood  <rsw@therandymon.com> - 2014-03-21 19:32 +0000
  Re: Ancient Linux servers  blighted slum houses of the Internet "tdk" <forum.tdk@squte.com> - 2014-03-22 09:19 -0600
    Re: Ancient Linux servers  blighted slum houses of the Internet Tim Watts <tw_usenet@dionic.net> - 2014-03-22 14:39 +0000
      Re: Ancient Linux servers  blighted slum houses of the Internet Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-23 15:15 +0000

csiph-web