mopman

chaotic good hacker of computers who adheres to the common stereotypes of people who are hackers of computers. Once-MD of ; DROP TABLE "Companies"; Ltd

[mopman @mopman]

please don't call me a beta male, i am at least a release candidate

[mopman @mopman]

Black Sloptober

[mRr3b00t @UK_Daniel_Card]

This week Will shall henceforth be named: the sloppening

[mopman @mopman]

Lol - yes if you could not do that, that would be great thanks Claude

[mopman @mopman]

@HMKnapp @VessOnSecurity Oddly, I remember being able to enable this on hosted partner domains that were not proxied (and did not pay). It may have been specific to the hosted partner setup, as we did get some stuff that normal free accounts didn't?

[mopman @mopman]

@HMKnapp @VessOnSecurity In that case someone should tell them to update their documentation

[mopman @mopman]

@narmacnetworth @mmaunder @ethicalhack3r @OliverSild @photomatt @perezbox @GoDaddy @gdb @eastdakota @wordfence I mean TBF, 4 does cover a lot of these details, if used correctly

[mopman @mopman]

@VessOnSecurity Ignore me, this only works on paid plans it turns out, which violates "no money"

[mopman @mopman]

@VessOnSecurity (not that I think WAF is a good option for this, you just made me curious)

[mopman @mopman]

Honestly I don't really care what Joe Tidy knew about web development when the people throwing the shade are responsible for environments that were running PHP 5/7 in 2026

[mopman @mopman]

@_0xKiwi Guess I gotta tell our marketing team you need to be invited to more parties 😔

[mopman @mopman]

@UK_Daniel_Card I swear most of these are essentially just proxies for what we do at work except we labelled it honestly

[mopman @mopman]

@defeat_admitter @LiveOverflow You should hear the things I say to my wardrobe when I stub my toe on it

[Vess @VessOnSecurity]

OK, serious question. About 2/3 of our customers are on PHP 7.3, one is on 5.6 (all on Windows, Apache 2.4, PHP started as a Fastcgi process, not Apache module). They can't install the latest PHP. We've done the recommended PHP settings mitigations, but they are not enough.

[mopman @mopman]

@VessOnSecurity Vibe port the apps to modern PHP? Semi kidding but...

Failing that, replicate the backport work from Sury or similar into a windows build? :grimace:

[mopman @mopman]

@MalwareTechBlog Well yes but how we will sell AI doom with that attitude

[mopman @mopman]

@RealDrunkenmage @wolfpunkbot @CupOJoseph To be fair, the bootrom was also stolen. But only many years later with a microscope

[mopman @mopman]

@NahamSec Is Dos on Dope still around

[mopman @mopman]

Lol

[Dave W Plummer @davepl1968]

Guess which one doesn't have a security vulnerability.

[mopman @mopman]

@HackingLZ @AndrewMohawk My favourite version was the variant of this: when the exploit was written by "calif.10"

[mopman @mopman]

@Alph4betSoup she paid more than the pass costs in one journey to her office last time she visited im so cooked