The video looks like it's making this whole thing out to be a joke. Everything about it conveys a lack of seriousness. The dancing cartoon character, the ascii art, the music, the whiz-bang visual effects that obscure anything interesting or useful.
that's the point: it essentially shows (notice the --profile-flag) the work of 2 months making the exploit work reliably on every app-php/fpm-linux-combination. The only purpose is to spread fear - and then have 50% of the internet update to a patched version with 425 changed files reviewed by ~100people and their clankers at 1400 UTC sharp while for the vast majority (using fpm like recommended for ~10years everywhere...) disabling the progress-something-flag and (optionally...) disabling multipart-uploads would have nicely mitigated this.
The video looks like it's making this whole thing out to be a joke. Everything about it conveys a lack of seriousness. The dancing cartoon character, the ascii art, the music, the whiz-bang visual effects that obscure anything interesting or useful.
This is the least professional Video I’ve ever seen for anything like this. I can’t even follow what’s happening on screen.
that's the point: it essentially shows (notice the --profile-flag) the work of 2 months making the exploit work reliably on every app-php/fpm-linux-combination. The only purpose is to spread fear - and then have 50% of the internet update to a patched version with 425 changed files reviewed by ~100people and their clankers at 1400 UTC sharp while for the vast majority (using fpm like recommended for ~10years everywhere...) disabling the progress-something-flag and (optionally...) disabling multipart-uploads would have nicely mitigated this.
Have you tried asking Claude? Maybe we're in the age of agent-to-agent communication /s