Post by @rl_dane@polymaths.social

@rl_dane Same!

@rl_dane heh.heh. heh

@fbievan

He lives!!!

@rl_dane I'm happy that we don't have much stuff that relies on php, and it's all just intranet stuff, I'm really happy that we have very little external stuff.

@sotolf@polymaths.social same here, mostly intranet. There's some stuff that could be accessed over the internet but those will be fine on the intranet or only via a specific IP range for the time being. If people get some mild inconvenience then so be it.

@paul Yeah, it seems like the patch has reached repos now at least which is good. But I know if we had more stuff open outwardly that we manage and are connected to our stuff I would really be shitting my pants :p

@sotolf yeah same here.

Don't ever run anything public-facing unless it's clearly in your line of responsibility and you're staffed and organized for it.

@paul

@fedops @paul Yeah, only open to the net thing we have is an sftp server and that is running with whitelisted IPs, so I'm not sure if you can call that open.

@rl_dane i'm not even a sysadmin and got scrambling to take care of things

my school's website was built with php and had to search for 4 professors so i could tell them that the school network could be compromised by this

@rl_dane you would think that a school in which students have 7 hours of computer science and programming a week would know better :/

@clouderst

You'd think. But at least they were actually using in-house-developed stuff! I've been to huge, rich universities that just used Blackboard, Outlook/Office 365, and crap like that. 🤦‍♂️

@rl_dane nope. still using google workspace and classroom :/

@clouderst

WOOF. 😆

@clouderst

Yowza. :o

@rl_dane

Laughs in server that hadn't been getting security updates untill tonight.

I had at some point broken security updated and hadn't realized until tonight NGL