![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
Про buffer overflows и т.п.. Кстати, опыт PHP (не только, конечно, просто с PHP пример наиболее близкий и распространённый) наглядно доказывает, что разруха - в головах. PHP лишён проблем с управлением памятью и т.п., присущих C[++] - т.е. никаких buffer overflows, memory corruption и т.п. в нём сделать практически невозможно - однако проблемы с безопасностью в весьма распространённых программах на PHP довольно часты. Потому что плохому танцору никакие сапоги-самоплясы не помогают, как видно.
mozillazine:
The Mozilla Foundation's community marketing site Spread Firefox has been hacked. According to an announcement on Spread Firefox about the attack, it appears that the site was compromised in an attempt to use it to send spam.
KnowProSE.com:
I found out that there's a "new" drupal exploit which allows posters to inject arbitrary code into the system for execution on the server -by way of comments.
Drupal.org:
Drupal 4.6.2 also fixes two security vulnerabilities: one related to the use of Drupal's input filters and one in the XML-RPC library that Drupal ships with.
Arstechnica:
It is likely that exploit was facilitated by a recently discovered vulnerability in Drupal, the open source CMS utilized by SpreadFirefox and other community sites.
C|Net:
The exploited flaw was a vulnerability in PHP, the language in which Drupal, the content management system that Spread Firefox uses, is written.
Кто-то пишет кривой, код, кто-то забывает поставить агрейд - а виноват выходит PHP...
The Mozilla Foundation's community marketing site Spread Firefox has been hacked. According to an announcement on Spread Firefox about the attack, it appears that the site was compromised in an attempt to use it to send spam.
KnowProSE.com:
I found out that there's a "new" drupal exploit which allows posters to inject arbitrary code into the system for execution on the server -by way of comments.
Drupal.org:
Drupal 4.6.2 also fixes two security vulnerabilities: one related to the use of Drupal's input filters and one in the XML-RPC library that Drupal ships with.
Arstechnica:
It is likely that exploit was facilitated by a recently discovered vulnerability in Drupal, the open source CMS utilized by SpreadFirefox and other community sites.
C|Net:
The exploited flaw was a vulnerability in PHP, the language in which Drupal, the content management system that Spread Firefox uses, is written.
Кто-то пишет кривой, код, кто-то забывает поставить агрейд - а виноват выходит PHP...
Tags:
