Hacker Newsnew | past | comments | ask | show | jobs | submit | DanOWar's commentslogin

Do you mean fission?


You're going to split hydrogen atoms? Into what exactly?


We'll split H into three parts: |,-, and |.


By remote control, do you mean as a VNC/RDP alternative for non-gaming purposes?


I guess so, I've been using it to run Chrome just for the lolz and it works really well. Just add an app to your Steam library, then run it and good chances are that it'll actually start. Sometimes it doesn't but in most cases it works well!


I used to have a Firefox shortcut in my Steam games list so I could watch online video with the Steam overlay. It wasn't flawless, but it worked great most of the time, as long as I didn't try to open the overlay until I was in full screen.


Example from the Github search:

     <?php
          $result=shell_exec("cat ".$_GET['name'].".txt");
          echo $result;
     ?>
How to abuse:

     $_GET['name'] = "/dev/null; rm -rf /; echo ";


Wrong. `rm -rf /` fails without the `--no-preserve-root` option.


'rm -rf /*' should do the trick; kind enough to leave them with a '/' directory.


need root access, no?


Thats not the point. Of course "rm -rf /" won't work, but what about downloading and installing a backdoor? Or modifying the website scripts itself? Or dumping a database? Or...

Removing all the files from a filesystem is something only a script kiddy would do, and it's probably a "best case scenario" for the owner of the server, because the impact of that is relatively small (just re-install the server and restore the backups). But once the attacker starts injecting mallware, stealing customer information (credit card numbers anyone?) or anything else nasty they can think of that they would benefit from, then you are in a whole lot more trouble...


True, but once you have <foo; $any_command_with_user_privilege> you can start executing any user commands. So you do a </dev/null; mkdir ~/www/nefarious; cp ~/www/AdminSettings.php ~/www/nefarious/settingns.txt;> (without the index file you can just view the file as plain text, which probably contains the database username and password. Then you can go on and download a database dump. The attacker probably does not give a damn about root in this scenario.


I've had this issue with an iPhone 2 and 4, and was able to permanently fix it in both cases by applying acetone to a cotton swab (Q-Tip) and cleaning the home button with it (allowing a small amount of acetone to enter into the seam). In both instances, the home button worked like new afterwards, for years. Your results may vary, but to maximize your chances, I'd suggest using a high grade acetone (e.g. from a home improvement store) as opposed to nail polish.


It requires additional dependencies because HHVM has to emulate most of the core PHP extension functionality to be compatible with PHP, for example 'mysql_query', etc.


Facebook's HHVM (HipHop VM) compiles webpages into native machine code that can be executed directly on the processor. People often confuse HHVM with HPHPc, also made by Facebook. HPHPc came first; it was a converter that converted all the PHP files in a folder into individual C++ files. In other words, you would end up uploading the C++ files to the server, not PHP files. Facebook abandoned HPHPc early on for multiple reasons (it was actually developed by a single developer as a tool for one-time use to convert all of Facebook's existing PHP files into C++, back when Facebook was considering rewriting the website in C++ for improving performance). While the idea for HHVM was loosely based on HPHPc, the approach is much different. HHVM is a standalone replacement for the PHP engine. It has almost 100% support with the native PHP language, up to PHP 5.5, and even (intentionally) reproduces the various bugs in the PHP language, to maintain compatibility. HHVM only replaces PHP, not Apache or anything else in your stack. It is really, really easy to replace it via their FastCGI handler.


I deployed HHVM on a production site as a test, and without changing a single line of code, on average, I saw nearly a 60% decrease in page generation time from the standard PHP binary. Incredible.


Mostly right.

HPHPc produced the C++ code and that was compiled into a single binary executable. The deployment process involved using bittorrent to distribute the blob to all of the production servers.

HPHPc wasn't abandoned per say, it was only deprecated once the performance improvements brought on by HHVM were significant enough to justify the transition.


In Word: Edit > Paste Special > Unformatted Text


Or Ctrl+Alt+V, which is the shortcut for Paste Special.


Nanobubbles [1] are already being studied for this very purpose. Drugs are packaged within small bubbles, and injected into the blood stream. Targeted drug delivery is performed by popping the bubbles using ultrasound waves from an external speaker.

[1] http://www3.imperial.ac.uk/newsandeventspggrp/imperialcolleg...



Was fail2ban even working? After a reformat, did you install fail2ban manually, or from a repo? Are you using syslog or rsyslog? Each's log format is slightly different, meaning you have to edit the filter to accomodate. The base install filter didn't even work correctly for me on a fresh CentOS re-image. Also, the latest version on the website is v0.8.7.1, but on CentOS epel it's v0.8.4.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: