news.ycombinator.com
Untitled
There is a lot of cynicism in this thread but the fact this is still open and hour later ends the narrative in my view. There are not "thousands of swarms of agents autonomously compromising every site for its authors" or any the other x / LinkedIn dribble ive been reading. It clearly isnt happening.
Comments
5 preview comments · loading full threadLog in to h4cker, then connect Hacker News to publish comments.
OP just posted that there's a solve. And from a previous update thread apparently their first config was not actually exploitable? So ... seems like it is happening. Maybe not instantly, at least not if the site just remains down for hours because it's functionally DoSed, but it still is apparently exploitable.
right: either it’s so hard to exploit that $1,000 isn’t enough to risk “giving away” your exploit chain or actual exploitation of this bug is impractical, either way the CVEpocalypse is overblown
Yeah, AI seems like a good shift in "narrative making." It's easy to ask AI "give me an efficient way to "confirm or deny this narrative" and have something like this go viral. This is good because it makes narratives more truthful
What point is an anonymous online post proving? Can anyone verify that the private key actually exists? Or which version of PHP the site is running? Or if it is running PHP at all?
I reconfigured nginx on one of my servers to log all attempted multipart POST requests. Been tailing the log, and while there is a trickle of entries, they all are for empty forms, none are php2shell specific. Interestingly enough, virtually all of these come from the Google Cloud IP space. There was a single hit from China and two from Europe.