http://www.perlmonks.org?node_id=1062243


in reply to Re^4: Patch an old Perl version
in thread Patch an old Perl version

The attack is real and proven.

First: prove it!

But, even if that does happen, to what consequence?

The instance of perl running the cgi script in response to the attacker's request, self terminates. Meaning the attack is over.

The web-server continues to run; new instances of perl are run to handle everyone else's requests.

The total damage done is EXACTLY ZERO. Nada. Zilch.

No DoS; No DDos; No affect on other users; nor the web-site; nor anything permanent.

The attacker's session end's immediately. Big deal?


With the rise and rise of 'Social' network sites: 'Computers are making people easier to use everyday'
Examine what is said, not who speaks -- Silence betokens consent -- Love the truth but pardon error.
"Science is about questioning the status quo. Questioning authority".
In the absence of evidence, opinion is indistinguishable from prejudice.

Replies are listed 'Best First'.
Re^6: Patch an old Perl version
by demerphq (Chancellor) on Nov 15, 2013 at 12:12 UTC

    Look, I really wish you would stop repeating this irresponsible nonsense. You are a senior monk. People here on the site respect you and listen to you. IMO with that respect comes responsibility. Repeatedly saying that an attack you *clearly* do not understand is not real is NOT responsible.

    So please, just stop it.

    ---
    $world=~s/war/peace/g

      Look, I really wish you would stop repeating this irresponsible nonsense.

      And I wish you'd get off your high horse and stop wasting hundreds, if not thousands of peoples valuable time; but you won't.

      If I'm wrong, PROVE IT! Otherwise, shut the f*** up.


      With the rise and rise of 'Social' network sites: 'Computers are making people easier to use everyday'
      Examine what is said, not who speaks -- Silence betokens consent -- Love the truth but pardon error.
      "Science is about questioning the status quo. Questioning authority".
      In the absence of evidence, opinion is indistinguishable from prejudice.