← Back to context

Comment by Topfi

11 hours ago

Sorry, what do you mean? There was/is an open RCE in PHP and the impact was/is massive. Pity the teams on older versions especially.

So what sites are confirmed to be "hacked" cause of this exploit? I mean, Log4J broke Minecraft and a lot of other services.

  • It was just disclosed, be patient. A PHP RCE is no joke.

    • State hackers and others prepare how to use exploits long before they happen. If there was an opened known RCE in PHP they would have caused havoc immediately. Clearly that did not happen.

      Is this HN or boomer FB? I don't know anymore.

  • We don't know yet. Not sure how that changes things either way. Impact goes far beyond getting exploited and the leak wasn't ideal in that regard either.