I'm glad to see websites offline, because it means they're applying the crucial PHP update rolled out. The fewer sites that get owned, the better. Today is gonna get a Wikipedia entry, I can feel it.

Show Post

Thread

Show Post

As someone who has been in security for a very long time now: This. Mostly just this.

Show Post

You can protect yourself against cross-service account compromise by not reusing passwords, and you should already be doing that. But yeah, this problem is for providers to fix.

Show Post

The php thing does seem like a problem for a non-trivial number of designers, photographers, etc that run their own old, half-homecooked portfolio websites that they barely know how to update.

Show Post