4 ms·
Site is down for me, but I thought we agreed last time this was on HN it wasn't really that big of a deal.. Previous discussion: http://news.ycombinator.com/it
by nthitz 14y ago
Site is down for me, but I thought we agreed last time this was on HN it wasn't really that big of a deal..
Previous discussion: http://news.ycombinator.com/item?id=4661625 http://news.ycombinator.com/item?id=4661625
- perezbox 14y agoWhen was it last on HN? Don't remember seeing it.
- perezbox 14y agoIt's back up now.
- perezbox 14y agoThanks for the update withe link. Yeah, not sure I'd agree with it not being a big deal. Especially with the type of recon you can do on this information as an attacker. TP
- testing12341234 14y agoI believe the consensus was that it was not a big deal for www.php.net to have the server status page up. The original link for that news item was http://php.net/server-status http://php.net/server-status. However, not all sites are like php.net which is used mainly for documentation (it would appear). That said, a status page leaking IPs or sessions (PHPSESSIONID) for a private forum, government agency, etc, could be a different story. Edited: Typo
- yen223 14y agoGotta ask, is there any benefit to having the server status open to public?