Re: Style rule change?

2012-01-09 Thread HyperHacker
On Sun, Jan 8, 2012 at 23:29, William A. Rowe Jr. wrote: > On 1/8/2012 12:04 PM, Guenter Knauf wrote: >> on the other side: I've asked me already often if we shouldnt increase the >> maxchar/line; I >> believe that would in many cases greatly increase readability ... >> and honestly: who the heck

Re: Error codes

2011-11-30 Thread HyperHacker
On Wed, Nov 30, 2011 at 01:09, Stefan Fritsch wrote: > On Wednesday 30 November 2011, Guenter Knauf wrote: >> Am 30.11.2011 01:51, schrieb William A. Rowe Jr.: >> > On 11/29/2011 5:30 PM, Stefan Fritsch wrote: >> >> Currently my scripts produces: >> >> >> >> http://people.apache.org/~sf/error-msg-

Re: mod_lua Filter Hook?

2011-06-15 Thread HyperHacker
On Wed, Jun 15, 2011 at 15:34, Joachim Zobel wrote: > On Wed, 2011-06-15 at 17:04 -0400, Akins, Brian wrote: > >> For filters, etc, not sure we really need buckets in Lua.  Maybe just >> represent them as a table of buffers or something simple like that. > > This misses my (admittedly not so impor

Re: a plan mod_lua and 2.4

2011-03-19 Thread HyperHacker
On Sat, Mar 19, 2011 at 04:57, Dan Poirier wrote: > On Tue. 2011-03-15 at 09:08 AM EDT, "Akins, Brian" > wrote: > >> How many people actual run mod_lua (or a derivative/relative) in production? >> Am I the only one on a "real" site? > > I guess the others, if any, aren't reading dev@.  And searc

Re: a plan mod_lua and 2.4

2011-03-15 Thread HyperHacker
On Tue, Mar 15, 2011 at 08:05, Dan Poirier wrote: > On Tue. 2011-03-15 at 09:36 AM EDT, HyperHacker wrote: > >> I've been eagerly looking forward to a stable mod_lua with which to >> make my sites. If done well, Lua could replace PHP as the #1 web >> scripting langu

Re: a plan mod_lua and 2.4

2011-03-15 Thread HyperHacker
On Tue, Mar 15, 2011 at 07:08, Akins, Brian wrote: > On 3/14/11 7:51 PM, "Brian McCallister" wrote: > >> I think the right path for this is to shrink the core mod_lua module >> to be the *minimal* set for integration, and pull all the higher level >> functionality into a non-core module, which us

Re: rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-09-03 Thread HyperHacker
On Fri, Sep 3, 2010 at 13:24, dave b wrote: >> "first the attacker has to find  a way to reduce system memory to an >> almost oom condition" >> Say, by attacking several httpd threads and/or unrelated processes to >> get them to eat up memory. >> >> -- >> Sent from my toaster. >> > > If you know s

Re: rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-09-03 Thread HyperHacker
On Fri, Sep 3, 2010 at 07:12, Graham Leggett wrote: > On 03 Sep 2010, at 2:37 PM, HyperHacker wrote: > >> ...assuming he attacks a single httpd thread, as opposed to say a >> distributed attack or attack on an unrelated process. > > How would a distributed attack be dif

Re: rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-09-03 Thread HyperHacker
On Fri, Sep 3, 2010 at 03:49, Graham Leggett wrote: > On 03 Sep 2010, at 5:31 AM, dave b wrote: > >> Sure ok :) >> You have no complains from me really here. Just this could be an issue >> on some platform with some mods potentially :) > > In order to understand why it isn't an issue for httpd, yo

Re: C as config

2010-06-08 Thread HyperHacker
On Tue, Jun 8, 2010 at 09:34, Akins, Brian wrote: > On 6/8/10 8:07 AM, "Dan Poirier" wrote: > >> That's a shame.  I wonder if another embedded language would do better? >> E.g. mod_perl, mod_python?  They've both been around for a while. I >> wonder why neither has gotten into the server? > > Lua

Re: Fast by default

2010-06-01 Thread HyperHacker
On Tue, Jun 1, 2010 at 16:25, Sergey Chernyshev wrote: > This sounds scary! How do large companies enable gzip then? How many hoops > do they jump through? sounds like those hoops are in thousands! > And I don't understand how one company's setup would be different from > another still, even if si

Re: Is this possible ?

2010-05-20 Thread HyperHacker
On Thu, May 20, 2010 at 08:23, wrote: > >  Let’s suppose this configuration > >  |Server1| <- |Server2| <- |Client| > >  A client sends a request that starts a script on Server2.The script ( > running on server2) >  will download a webpage from Server1. >  Is it possible to record Client

Re: Reducing number of mod_lua hook directives

2010-05-11 Thread HyperHacker
On Tue, May 11, 2010 at 20:12, Dan Poirier wrote: > On 2010-05-11 at 12:55, HyperHacker wrote: >> On Tue, May 11, 2010 at 08:47, Dan Poirier wrote: >>> I just thought of a problem - right now, the funcname is optional >>> (defaults to "handle").  I hate

Re: Reducing number of mod_lua hook directives

2010-05-11 Thread HyperHacker
On Tue, May 11, 2010 at 08:47, Dan Poirier wrote: > On 2010-05-11 at 08:52, Dan Poirier wrote: > >> On 2010-05-10 at 16:03, "William A. Rowe Jr." wrote: >>> On 5/10/2010 2:25 PM, Brian McCallister wrote: > ... > > to > > LuaHook AccessChecker /path/to/script.lua  funcname >>>

Re: Reducing number of mod_lua hook directives

2010-05-11 Thread HyperHacker
On Tue, May 11, 2010 at 06:52, Dan Poirier wrote: > On 2010-05-10 at 16:03, "William A. Rowe Jr." wrote: >> On 5/10/2010 2:25 PM, Brian McCallister wrote: ... to LuaHook AccessChecker /path/to/script.lua  funcname LuaHook AuthChecker   /path/to/script.lua  funcname >

Re: slowloris mitigation

2010-04-14 Thread HyperHacker
I haven't used it, but if mod_reqtimeout makes it entirely redundant, my vote would be to keep it in trunk only. People interested in how the attack/defence work can look at it, and there might be those who for some reason don't want mod_reqtimeout. -- Sent from my toaster.

Re: svn commit: r925858 - in /httpd/httpd/branches/2.2.x: CHANGES STATUS docs/manual/mod/core.xml server/config.c

2010-03-21 Thread HyperHacker
On Sun, Mar 21, 2010 at 14:28, William A. Rowe Jr. wrote: > On 3/21/2010 3:14 PM, William A. Rowe Jr. wrote: >> >> Include conf/empty/* >> >> Include conf/*/whoops.conf >> >> The last one (based on an existing conf/empty directive) fails, alerting the >> admin >> to the fact that they made a typo

What happened to mod_lua?

2010-03-07 Thread HyperHacker
A while back I had the idea that Lua would be a great scripting language for web servers. I checked Google, and several pages mentioned a recently developed Apache httpd module that does just that. However, even months later, all a search finds is a couple blogs and sites talking about "the next ve