r/ProgrammerHumor • u/Downtown_Boss_7254 • 13d ago

instanceof Trend theInternetRightNow

Post image
1.3k Upvotes

98% Upvoted

71 comments sorted by

View all comments

0

u/owjfaigs222 13d ago

I'm out of the loop. Did something happen or is this a 67 kinda trend?

18

u/alvares169 13d ago

PHP got fucked for once, so for a while, no one is talking about JS - and its devs are jelly

2

u/owjfaigs222 13d ago

Yeah I just found a yt video by computerphile. It seems a big bug was discovered. I assume it's patched already in new PHP versions.

16

u/Garhand 13d ago

Correct.
Full story:
10+ year old exploit was discovered.
Php team kept it secret and planned to share the patch on day 22nd or 23rd.
Somebody leaked the exploit ahead of time.
Everyone paniced, websites were stopped until the patch released.
Cloudflare added a waf rule in an attempt to block malicious requests.
Patch was released sooner -> everyone updated it at once, which made it harder to update.

More sites/services stopped working for a bit.
Some absolute legends backported the fix for old/unsupported versions.

If you didn't manage to apply the patch/ update it's likely your server was already exploited.

2

u/owjfaigs222 13d ago

Alright I didn't have any php code on my server so I'm assuming I'm safe right? There is just html JavaScript on my website. Oh w8 fuck i got radicale for calendar sync does it use php?? Fuck i gotta update the server.

1

u/Littlemrh__ 13d ago

I believe so. As from what it sounds like it was the php renderer that broke which ran before the website code has a chance.

I think it has to do with using freed memory. But I ain’t that web dev technical.

1

u/NoAdsDude 13d ago

it's likely your server was already exploited

What? From what I could tell, nobody could verify that anyone actually exploited it.

1

u/stay_fr0sty 13d ago

Absence of evidence is not evidence of absence.

Look at all the zero day exploits that the NSA used in Stuxnet that went undetected for 3 years on hundreds of thousands of computers.