Archive for the ‘TechTalk’ Category
PHP Hash attack security issue through POST/GET variables
January 16th, 2012 | 
Author: A number of security researchers have provided a way to craft HTTP requests which take down a PHP-based web server completely. The idea is that essentially a specially constructed set of POST variables can completely put any web server into a never-ending CPU spin.
The newest version of PHP, PHP 5.3.9, has a patch for this, but we were already using a security filter called "suhosin" which limited POST (etc) variables nicely. Read the rest of this entry »
Posted in 
TechTalk: Secondary MX servers deemed dangerous!
For the system administrators among you:
MX records, as some of you would already know, provide a DNS-based prioritized fallback method for email servers. The idea is that it is possible to supply a list of servers that will accept your email, where the lowest number MX server is tried, then the next, and so on until a valid connection is made and the email is then sent over that connection. Read the rest of this entry »