Beefy Boxes and Bandwidth Generously Provided by pair Networks chromatic writing perl on a camel
"be consistent"
 
PerlMonks  

Re^4: Patch an old Perl version

by rjbs (Pilgrim)
on Nov 12, 2013 at 17:47 UTC ( #1062242=note: print w/ replies, xml ) Need Help??


in reply to Re^3: Patch an old Perl version
in thread Patch an old Perl version

The attack is real and proven. I've let it crash my machine in a realistic simulation of the real world. Please patch your world-facing perls.

rjbs


Comment on Re^4: Patch an old Perl version
Re^5: Patch an old Perl version
by BrowserUk (Pope) on Nov 12, 2013 at 17:56 UTC
    The attack is real and proven.

    First: prove it!

    But, even if that does happen, to what consequence?

    The instance of perl running the cgi script in response to the attacker's request, self terminates. Meaning the attack is over.

    The web-server continues to run; new instances of perl are run to handle everyone else's requests.

    The total damage done is EXACTLY ZERO. Nada. Zilch.

    No DoS; No DDos; No affect on other users; nor the web-site; nor anything permanent.

    The attacker's session end's immediately. Big deal?


    With the rise and rise of 'Social' network sites: 'Computers are making people easier to use everyday'
    Examine what is said, not who speaks -- Silence betokens consent -- Love the truth but pardon error.
    "Science is about questioning the status quo. Questioning authority".
    In the absence of evidence, opinion is indistinguishable from prejudice.

      Look, I really wish you would stop repeating this irresponsible nonsense. You are a senior monk. People here on the site respect you and listen to you. IMO with that respect comes responsibility. Repeatedly saying that an attack you *clearly* do not understand is not real is NOT responsible.

      So please, just stop it.

      ---
      $world=~s/war/peace/g

        Look, I really wish you would stop repeating this irresponsible nonsense.

        And I wish you'd get off your high horse and stop wasting hundreds, if not thousands of peoples valuable time; but you won't.

        If I'm wrong, PROVE IT! Otherwise, shut the f*** up.


        With the rise and rise of 'Social' network sites: 'Computers are making people easier to use everyday'
        Examine what is said, not who speaks -- Silence betokens consent -- Love the truth but pardon error.
        "Science is about questioning the status quo. Questioning authority".
        In the absence of evidence, opinion is indistinguishable from prejudice.

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://1062242]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others imbibing at the Monastery: (7)
As of 2014-04-18 23:07 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    April first is:







    Results (472 votes), past polls