theboblong
Re:There isn't an easy exploit for this PHP vulnerability
on Thursday October 22, 2026 @03:39AM (#50192387)
PHP often has access to a DB API in order to run the site; that's where the fun starts even if you are restricted to PHP's access level.
Re:There isn't an easy exploit for this PHP vulnerability
on Thursday October 22, 2026 @03:16AM (#50192215)
We do need to eventually see the proof that this was so urgent. Because if it wasn't then this was effectively a massive DOS attack on society.
"9.2" is a big claim and a powerful justification for action, but with OpenAI involved my faith is very low that this isn't largely a publicity stunt. Especially given the age of the vulnerability.
Re:PHP 8.2.35
on Wednesday October 21, 2026 @11:34AM (#50182766)
I'm glad they didn't do anything disruptive, then. Like wind the world's CIOs up into a frenzy of FUD and bring thousands of servers down in a coordinated panic attack synchronised to the minute.
Imagine if they had just patched the code and rolled it out with an advisory?! Oh my GOD! Won't someone think of Sam Altman and his huge pile of debt?!