HomePhabricator

Recent Activity
ActivePublic

Recent Activity

Sat, Oct 24

epriestley updated the task description for T13706: php2shell: Phacility Cluster ops notes.
Sat, Oct 24, 2:49 AM · Phacility

Fri, Oct 23

epriestley added a comment to T13706: php2shell: Phacility Cluster ops notes.

Piledriver sequence is roughly:

Fri, Oct 23, 10:55 PM · Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Fri, Oct 23, 4:30 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

Found one, creating a new project returns:

Fri, Oct 23, 4:26 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Fri, Oct 23, 4:23 PM · Security, Phacility
epriestley triaged T13706: php2shell: Phacility Cluster ops notes as Normal priority.
Fri, Oct 23, 3:44 PM · Phacility
holmboe added a comment to T13704: PHP2Shell.

Found one, creating a new project returns:

Fri, Oct 23, 3:30 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

I suspect a lot of behavior is still broken, but at least some things should be working now. I'm working on restoring SSH access to repositories (which I suspect is just an ops/config issue) and then I'll fix whatever shows up in the error log.

Fri, Oct 23, 3:23 PM · Security, Phacility
holmboe added a comment to T13704: PHP2Shell.

We are live! Thank you Evan for your relentless work. 🙏

Fri, Oct 23, 3:17 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Fri, Oct 23, 3:16 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.
  • Restoring MySQL from backup took a very long time (partly because I didn't realize the volume was an ancient gp2 volume with a tight limit on iops) but succeeded.
  • admin is back up and cluster directory services are mostly working.
  • I'm working on redeploying web now; this tier is stateless and doesn't need to load backups.
  • The most recent available backup was slightly out of date (Oct 16th IIRC). If this caused issues (e.g., double-billing or deleting recently-invited user accounts) I'll sort everything out once services are back up.
Fri, Oct 23, 3:01 PM · Security, Phacility

Thu, Oct 22

epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 11:21 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 11:18 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 11:14 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

One issue I'm struggling with is that some daemon parsing is failing...

Thu, Oct 22, 11:08 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 10:23 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 10:17 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

One issue I'm struggling with is that some daemon parsing is failing:

Thu, Oct 22, 10:13 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

Actually, Phabricator uses static::class since D21744 and it works in older PHP per 3v4l.org, so I think I'm incorrect that this requires PHP 8.

Thu, Oct 22, 9:35 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 9:32 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

See T13637. See T13588. In PHP 8.1, the behavior of static variables in methods changed, per this snippet from the PHP Documentation:

Thu, Oct 22, 9:19 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 8:59 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 8:44 PM · Security, Phacility
epriestley added a comment to T13705: AI has ruined the internet.
ubuntu@secure-01a4c8f6:/core$ grep '22/Oct/2026' /var/log/apache2/other_vhosts_access.log | wc -l
1032536
ubuntu@secure-01a4c8f6:/core$ grep '22/Oct/2026' /var/log/apache2/other_vhosts_access.log | grep developers.facebook.com | wc -l
140014
ubuntu@secure-01a4c8f6:/core$ grep '22/Oct/2026' /var/log/apache2/other_vhosts_access.log | grep reflection.ai | wc -l
69485
ubuntu@secure-01a4c8f6:/core$ grep '22/Oct/2026' /var/log/apache2/other_vhosts_access.log | grep go/applebot | wc -l
8978
Thu, Oct 22, 8:33 PM
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 8:25 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

I do want $array[null] to kill the server in the general case so all the high-quality Phabricator code I write in the future can't do it, but I realize I may need to concede and silence the error. I am going to give up on this one:

Thu, Oct 22, 7:09 PM · Security, Phacility
avivey added a comment to T13704: PHP2Shell.

also maybe copy https://we.phorge.it/D25387, which makes it so deprecation
messages don't kill the server.

Thu, Oct 22, 7:04 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.
  • AWS now has over 800 instance types???
  • I believe I've launched a new admin with a patched PHP that is surviving a least some of the deployment process. MySQL can't upgrade databases across major versions, so I'm restoring from backup now.
  • @jmeador oh hi there
  • @avivey Yeah, like half the pages are working for me while logged in but things are still pretty rough.
Thu, Oct 22, 7:04 PM · Security, Phacility
avivey added a comment to T13704: PHP2Shell.

Hi Evan,

Thu, Oct 22, 6:52 PM · Security, Phacility
jmeador added a comment to T13704: PHP2Shell.

A wild epriestley appears!

Thu, Oct 22, 6:33 PM · Security, Phacility

Panel Used By

DashboardRestricted Dashboard
DashboardHome (Logged-out)
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard
DashboardRestricted Dashboard

Event Timeline

epriestley renamed this panel from to Recent Activity.May 16 2014, 2:55 AM
epriestley edited a custom field.
epriestley edited a custom field.
epriestley changed the visibility from "All Users" to "Public (No Login Required)".Jun 23 2014, 11:39 PM