3 ms·
Wonder if anyone will make memory/injection-safe imitations of old software like this. I'd imagine it'd be pretty eye-catching if you did run a public discussio
by LoganDark 1mo ago
Wonder if anyone will make memory/injection-safe imitations of old software like this. I'd imagine it'd be pretty eye-catching if you did run a public discussion board with exactly the vibe, syntax, etc. of old phpBB.
- bgc 1mo agoI wonder how well Cloudflare et al defend against the class of “nobody could still possibly be using this” vulnerabilities.
- LoganDark 1mo agoCloudflare likes to block anything that looks like code even if an application is not vulnerable, so I'd imagine it would stop some beginner attacks. (most likely not nearly all possible attacks though)
- jamesfinlayson 1mo agoYeah a few years ago I got a bug report from someone in the business about getting a weird error when trying to update some text. Turns out they were trying to add (*) as a disclaimer at the end of something and Akamai was just giving a blank 403 because it looked to much like SQL.
- jamesfinlayson 1mo agoNot sure - Akamai seem to roll out defenses against most new attacks, and Akamai isn't a new company so presumably they've been doing it for a while? Never dug too deeply into the WAF settings so maybe it's possible to turn them on or off.
- mmanfrin 1mo agoHonestly it was the first thought I had after seeing a link someone above posted to an Invision Power Board repo. I wanna point claude at it and tell it 'remake this for me in [some modern language]'.
- HeckFeck 1mo agoI'm actually building this as we speak: A hardened phpBB 1.4.4 that targets PHP8 and modern MariaDB. Why ever not.