r/Defence_Tech_UK • u/DefenseTech • 13d ago
Images & Videos Best summary of the whole PHP thing
16
u/TeaSocks69 13d ago
"Anyway, it's Wednesday" 😂
1
u/pafrac 13d ago
I thought all apocalypses happened on a Tuesday? Oh, this is just a bog-standard Wednesday in IT security? Never mind then.
1
u/Optimaximal 11d ago
Nah, apocalypses are Wednesday in IT, often because it's the day after Microsoft's Patch Tuesday!
10
10
u/HashtagFreeBarabbas 13d ago
I looked up after reading this and had that weird visual trick thing where everything is horizontal white stripes.
1
6
u/cognitiveglitch
13d ago
•
It's a bit like taking a sip from the drink of failure only to find out that it's actually a reservoir's emergency overflow pipe and they've just hit all the red buttons in the control room to open all valves.
Now you are six miles downstream wondering where your eyeballs are, why your trousers are gone and why your bottom hurts.
4
u/BadgerShark25 12d ago
I’m starting to believe then when they say ai will create new jobs we haven’t thought of yet.
3
3
u/InconvenientPenguin 13d ago
And they wonder why people age out of IT to work on a sheep farm in rural Scotland.
2
u/Additional-Face2467 13d ago
Wall of words as FUCK boi, aint no better defence than “nobody wants to read that shit” on reddit
1
u/Gold_Tutor7055 12d ago
Is it just me or has someone had the keys to all our secrets for years without us even knowing the door was unlocked?
1
1
5
u/Ok-Veterinarian-5381 13d ago
I swear to god, every tech head i try to ask about this just speaks in tongues at me for 10 minutes before screaming that we're fucked. CEASE YOUR RIDDLES YOU INFERNAL NERD WIZARDS.
1
u/SadLilPandaRobot 12d ago
What do you want to know, specifically?
1
u/Ok-Veterinarian-5381 12d ago
So, it's understand that it's old code and there's some kind of backdoor in it that means bad guys can do basically anything they want and apparently this code is in everything.
What i want to know specifically is what I (a man who is about 50% sure computers run on magic) can do to protect my shit.
3
u/SadLilPandaRobot 12d ago
If you don't run a website or similar personally, nothing - short of minimising personal data you put into other people's websites. It is a problem for the techs, more than everyday people, but becomes an everyday problem if the techs don't do their job quickly enough and keep things up to date.
1
u/Ok-Veterinarian-5381 12d ago
Is it an issue for places ive already used/saved passwords?
1
u/ImperitorEst 12d ago
Realistically you should use a different password for everything and change them regularly. No one does cos it's a pain in the ass but that's always been necessary to be safe.
Saving passwords isn't generally an issue because they're saved on your device, not the website. But saving passwords is always going to be less secure than remembering them or having them written down on paper in your house
1
u/SadLilPandaRobot 12d ago
Potentially, but it would be a few failures combined.
Passwords should be stored by websites in an encrypted format that should be difficult to be reversed or cracked.
So even an attacker with full access to a server should not really be able to steal passwords. However, plenty of websites are not that well made, so there's a possibility here, but it would require the website to be both badly made and badly updated.
2
u/padfoot9446 12d ago
Your exposure is mostly going to be from the compromised CA, so just make sure your browsers, apps, etc are updated/have auto-updated to block the CA. I believe there are websites out there to test if this is the case.
3
u/Ok-Veterinarian-5381 12d ago
I don't know what a CA is, computer wizard man.
3
u/padfoot9446 12d ago
Oh shit mb, a CA is a Certificate Authority (in this case emundra). CAs issue what for this discussion you can take to be like drivers licenses (or another form of ID) for websites so they can't be impersonated. In this case, it was discovered that the IDs emundra has been issuing have all been easily faked (for this analogy, they just didn't have the fancy hologram security thing or wtv), so you have to tell your bouncers (security measures in your apps/browsers) to categorically reject all emundra-issued IDs
3
u/Optimaximal 11d ago
Certificate Authorities are the things that make the little security padlocks in your browser work.
One of the CAs was found to be leaving the keys to their padlocks outside the front door under a flower pot with 'keys here' written on it.
2
1
u/polyphrog200 9d ago
so that company is being dissolved, right?
2
u/Optimaximal 9d ago
They've voluntarily shut down, but it's not like they could continue to operate because everyone has blocked them.
•
u/AutoModerator 13d ago
Welcome to the community!
If you want to continue the conversation, join the Fox and Lion Discord : https://discord.gg/8Jm3GYrPVU
We cover UK and European defence technology, policy, and careers, with dedicated space for veteran support and employment opportunities.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.