Comment by burnJS
1 day ago
I tried this more simplistic variant https://pastebin.com/kggc4q1T which supposedly would crash php but it was rejected by my CSRF middleware...
1 day ago
I tried this more simplistic variant https://pastebin.com/kggc4q1T which supposedly would crash php but it was rejected by my CSRF middleware...
If you maintain a 9 figures business, I would recommend to not rely on that and shut it down or at least do more.
A 9-figure business with PHP is mind-boggling.
How? This guy makes over $100k/mo from his PHP sites:
https://x.com/levelsio
Wait til you hear about The Facebook.
1 reply →
Wait until you hear that banks use Perl.
2 replies →
then you need to use a correct csrf token. it doesn't protect against this, anyone can get a valid csrf token, every visitor gets one.
I tried it too in a clean Debian Trixie container and got no crash.
This link gets me a shitton of extremely intrusiv ads, some of which look like malware (auto-downloading an "OperaSetup.exe"). Is pastebin already compromised?
I got this same earlier, but now it seems to be working. Perhaps just an oddly timed bug with some ads that has nothing to do with the incident?
Pastebin is just sketchy for a while now
it now serves ads that instantly start those downloads its been like that for a couple of weeks