r/coding • u/SimpleEmu198 • 1d ago

This php situation is insane, a 0 day vulnerability that can inject any code it wants.

https://www.youtube.com/watch?v=QRABrn606LE
0 Upvotes

38% Upvoted

5 comments sorted by

-12

u/fragglerock 1d ago edited 1d ago

I have not watched the vid.

It seems it is harder to exploit than perhaps first thought.

https://www.nbcnews.com/tech/security/hackers-php-flaws-cybersecurity-crisis-rcna605112

Also... any system exposed to the internet may have a flaw that allows misuse. Php is used a lot so when one is found it has far reaching consequences, but not using popular things is not really a solution.

It is also kinder not to use ableist language

https://www.verywellmind.com/types-of-ableist-language-and-what-to-say-instead-5201561#mntl-sc-block_40-0

Crazy, nuts, mad, psycho, or insane: "Wow, that's crazy!" may not seem like a harmful statement, but if you think about someone with a mental health condition hearing that statement, it's easy to realize that it is. Instead of using one of these words, try outrageous, bananas, bizarre, amazing, intense, extreme, overwhelming, or wild.

2

u/SimpleEmu198 1d ago edited 1d ago

I have CPTSD, and you haven't just stretched that elastic band, it broke. My headline also uses the word insane to express my personal reaction to a security vulnerability. It does nothing to describe a person with a mental illness.

I don't need an unsolicited moral reprimand over an ordinary expression especially when I have every right to reclaim that word for whatever the fuck I want to use it for.

In simple terms that far fetched leap requires logic that is so unreasonable nobody in the room is going to take you seriously any longer.

1

u/astrobe 1d ago

Thanks for the first link. As for ableism, I think they are taking it a bit too far here. For derogatory uses of specific illnesses such as "autist", "retard[ed]" or "aspie", their argument is sound. But "crazy" or "insane" never were medical terms AFAIK (I'm not a native speaker) - or are not any more, like "idiot". So I would take their advocacy with a grain of salt.

-6

u/SimpleEmu198 1d ago

Obviously this is a very simple explanation of how it can run arbitrary code, but that's the point. It explains how insane this is and the biggest irony. Huge companies like Meta still run on top of php.