logoalt Hacker News

0x1F8B • today at 2:05 AM • 2 replies • view on HN

If they're so confident this isn't exploitable this person should stand up a very basic nginx running php-fpm server running in an exploitable version of PHP and invite people to exploit it.


Replies

philsquared_ • today at 3:28 AM

Bonus points put cryptocurrency private key on their server as bounty.

SOLAR_FIELDS • today at 2:46 AM

I totally agree. We can sit here and posture all day, maybe it might justify our paychecks. Exploit it and show me why it’s fucked. Otherwise it’s just words

As Linus says: talk is cheap; show me the code