New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Comments
Shouldn't members be a bit more mindful of the tone, @FAT32? Some of the comments in this thread are unnecessarily hostile, and I think they contribute to a negative atmosphere. If I didn't know this is a fun and welcoming environment, reading this thread would make me look at the URL to see if I'm not on 4chan or something...
It's perfectly fine to disagree with people or raise concerns about their behaviour, but there are more constructive ways to express those views.
I think people expect some sanity checking of AI results to either confirm it's not hallucinating or that it is. Why did the PoC not work in your case? The AI should have said.
People will dump out AI results in Slack. If they include a few comments about what the AI got right and what it's off base about, people will treat the sanity checked result a lot higher than "AI did/said this".
@MikeA is php patched at extravm? (spanel) ✔
@labze is php patched at hostbrr? (cpanel)
@Francisco is php patched at namecrane? (cpanel)
@dustinc is php pachted at racknerd? (cpanel)
If you're a customer an email was sent about 12 hours ago as the updates were applied as soon as it was available. And the commonly suggested patches were applied yesterday.
i am a extravm customer! if i weren't a extravm customer, i wouldn't have asked. i did not receive an email!
Ok, well yes, it was patched/updated immediately. I'm always on top of things. Either way no email should be needed (I personally hate receiving constant emails from companies like the 10 I got today about it, lol), clients paying for service shouldn't have to worry about security risks that are out of their control. People pay for the peace of mind and to be worry free after all.
It... is not?
It happens in almost any thread now.
Want to find out
Because people won't stop being figuratively retarded and praise LLMs to the high heavens, and obviously it's just gonna get worse.
People abuse many things in life, it does not mean other people (who do not seem to have done much useful things) should be bullies.
If you consider this bullying you shouldn't even be using the internet in the first place
Sure, I will quit on Monday
It seems like the "leaked" PoC only works in Apache, and even then, I've only seen reports of it crashing the worker. A crash is bad, but it's no RCE.
Nah I love you bro, please stay
oh oh oh, perhaps I will reconsider on Sunday
It's a vulnerability not an exploit.
Not a case of AI user dumb, you are a case of dumb user AI
You're like a man with a fork in a world of soup.
Hi @hyperblast -- Good news, yes - the PHP patches have been applied across our cPanel shared/reseller hosting servers. We've been on top of this actually since October 20, with protections already in place well before the public scripts/PoCs started circulating online.
Since then, we've worked directly with the cPGuard team on additional WAF rules (and since all of our shared hosting servers run cPGuard, it works out perfectly for our customers), implemented php.ini mitigations, and applied the patched ea-php and alt-php packages as CloudLinux released them. Those additional protections remain in place even after the patches as well.
By the way, as I mentioned here, CloudLinux backported the fixes into their packages, so the PHP version number you see may still look the same, even though the patched build is installed. CloudLinux also confirmed this here: https://cloudlinux.statuspage.io/incidents/zl0vt1yq3dj5
I touched on this topic in the stickied LET thread as well, though there seem to be several threads going around LET, so happy to clarify here too
Here's a screenshot of the notice on our client area, with more details. No action is needed from our shared/reseller hosting customers:
He's like a man selling soup in a world of forks
Eats the meat and vegetables and not the broth? Drinks from the bowl?
Wtf was your point? Would you starve if you only had a fork in a world of soup?
Stupid out of place Chinese proverbs. I don't know if I've seen one appropriately used on this forum yet.
You really took it way too seriously lmao
AI bad, AI users dumb
Literally me
Nah youre smart and handsome, please marry me.
I value my time at ideally exactly 111€/hr at any time, no exceptions and SLA of 100%, most work is nowadays really just delegation and planning, security, inventory and post-sales are AI strongholds - i simply am not interested in large scale exploit distillation
any ssh clients in this thread