Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]

2007-01-04 Thread Bill Nash
On Wed, 3 Jan 2007, Darren Reed wrote: > The problem we have right now is that the language commonly used for > dynamic web pages on non-Microsoft platforms is PHP and that this has > not been engineered *for security*. > > The goal of a language such as PHP should be to make it possible > to do

Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]

2007-01-01 Thread Bill Nash
On Sun, 31 Dec 2006, Kevin Waterson wrote: > This one time, at band camp, Gadi Evron <[EMAIL PROTECTED]> wrote: > > > > > Indeed, the most annoying thing about the PHP worms today is that these > > PHP vulnerabilities being exploited are everywhere. > > These are not PHP vulnerabilities, these

Re: Invision Power Board v2.1.4 - session hijacking

2006-03-20 Thread Bill Nash
On Thu, 16 Mar 2006, [EMAIL PROTECTED] wrote: This report is ridiculous and quite frankly shows that the author does not understand how IPB works. Yes, the author is correct in finding that if you: copy the user's IP address, copy the user's user-agent and copy the user's session ID then th