I came across the link via https://mastodon.social/@CuratedHackerNews/117481600704689796

Last time I touched php it was ~20 years ago and maybe for a month. Could someone with actual php understanding weigh in?

Somehow, somewhere between the lines, my understanding was that there have been observances of the vuln being used in the wild before the 14 UTC. And that wasn’t from reading news sites

  • i_am_not_a_robot@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    2
    ·
    8 hours ago

    It’s too soon. Only people who are on top of things would have already noticed, and then even after people notice they’re probably going to want to do investigations and get PR people and lawyers involved before making any public announcement. We’re more likely to hear the consequences from dark web forums first.

    • INeedMana@piefed.zipOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 hours ago

      @povoq@slrpnk.net I think i_am_not_a_robot has a point that it’s too soon

      For unrelated reason I had to wipe my blocklists on VPS for a moment. Just during a few minutes one of my containers was getting hammered with all kind of .php requests.
      Even if it wasn’t used in the wild before, it seems that now bots are running in circles with those new toys