Comment by Gigachad
1 day ago
We almost need some bot that logs in to every vulnerable PHP server and turns it off to prevent it being properly exploited before the server admin updates it..
1 day ago
We almost need some bot that logs in to every vulnerable PHP server and turns it off to prevent it being properly exploited before the server admin updates it..
Kindware instead of malware. Just goes around finding vulnerabilities and using them to patch things and improve security everywhere.
Benevolent worms.
https://www.schneier.com/blog/archives/2005/12/benevolent_wo...
Heheh that's cute.
If people wait too long you could even have the bot use the exploit to update the PHP version.
Nice idea, but I don't think you would want e.g. your hospital to have their systems suddenly turn off.
Absolutely they do. Off today is better than a ransomware attack tommorrow.
I think this is an instance of the trolley problem. So, don't expect to find a correct answer.
Paying a ransomware attack tomorrow is very much better, than not having critical medical data for the emergency right now. Of course not having a public facing medical database based on PHP, would be even better, but that might not be a decision that they are able to make right now.
1 reply →
Turning off is better than silent data manipulation by an attacker.
But not than assessment and controlled shutdown or access minimization. Turning off critical systems can result in deaths.
12 replies →
I’ve thought about doing this in the past but have no trust in police to see it as a Good Samaritan act