HomePhabricator

Recent Activity
ActivePublic

Recent Activity

Sat, Oct 24

epriestley updated the task description for T13706: php2shell: Phacility Cluster ops notes.
Sat, Oct 24, 2:49 AM · Phacility

Fri, Oct 23

epriestley added a comment to T13706: php2shell: Phacility Cluster ops notes.

Piledriver sequence is roughly:

Fri, Oct 23, 10:55 PM · Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Fri, Oct 23, 4:30 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

Found one, creating a new project returns:

Fri, Oct 23, 4:26 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Fri, Oct 23, 4:23 PM · Security, Phacility
epriestley triaged T13706: php2shell: Phacility Cluster ops notes as Normal priority.
Fri, Oct 23, 3:44 PM · Phacility
holmboe added a comment to T13704: PHP2Shell.

Found one, creating a new project returns:

Fri, Oct 23, 3:30 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

I suspect a lot of behavior is still broken, but at least some things should be working now. I'm working on restoring SSH access to repositories (which I suspect is just an ops/config issue) and then I'll fix whatever shows up in the error log.

Fri, Oct 23, 3:23 PM · Security, Phacility
holmboe added a comment to T13704: PHP2Shell.

We are live! Thank you Evan for your relentless work. 🙏

Fri, Oct 23, 3:17 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Fri, Oct 23, 3:16 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.
  • Restoring MySQL from backup took a very long time (partly because I didn't realize the volume was an ancient gp2 volume with a tight limit on iops) but succeeded.
  • admin is back up and cluster directory services are mostly working.
  • I'm working on redeploying web now; this tier is stateless and doesn't need to load backups.
  • The most recent available backup was slightly out of date (Oct 16th IIRC). If this caused issues (e.g., double-billing or deleting recently-invited user accounts) I'll sort everything out once services are back up.
Fri, Oct 23, 3:01 PM · Security, Phacility

Thu, Oct 22

epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 11:21 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 11:18 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 11:14 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

One issue I'm struggling with is that some daemon parsing is failing...

Thu, Oct 22, 11:08 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 10:23 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 10:17 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

One issue I'm struggling with is that some daemon parsing is failing:

Thu, Oct 22, 10:13 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

Actually, Phabricator uses static::class since D21744 and it works in older PHP per 3v4l.org, so I think I'm incorrect that this requires PHP 8.

Thu, Oct 22, 9:35 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 9:32 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

See T13637. See T13588. In PHP 8.1, the behavior of static variables in methods changed, per this snippet from the PHP Documentation:

Thu, Oct 22, 9:19 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 8:59 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 8:44 PM · Security, Phacility
epriestley added a comment to T13705: AI has ruined the internet.
ubuntu@secure-01a4c8f6:/core$ grep '22/Oct/2026' /var/log/apache2/other_vhosts_access.log | wc -l
1032536
ubuntu@secure-01a4c8f6:/core$ grep '22/Oct/2026' /var/log/apache2/other_vhosts_access.log | grep developers.facebook.com | wc -l
140014
ubuntu@secure-01a4c8f6:/core$ grep '22/Oct/2026' /var/log/apache2/other_vhosts_access.log | grep reflection.ai | wc -l
69485
ubuntu@secure-01a4c8f6:/core$ grep '22/Oct/2026' /var/log/apache2/other_vhosts_access.log | grep go/applebot | wc -l
8978
Thu, Oct 22, 8:33 PM
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 8:25 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

I do want $array[null] to kill the server in the general case so all the high-quality Phabricator code I write in the future can't do it, but I realize I may need to concede and silence the error. I am going to give up on this one:

Thu, Oct 22, 7:09 PM · Security, Phacility
avivey added a comment to T13704: PHP2Shell.

also maybe copy https://we.phorge.it/D25387, which makes it so deprecation
messages don't kill the server.

Thu, Oct 22, 7:04 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.
  • AWS now has over 800 instance types???
  • I believe I've launched a new admin with a patched PHP that is surviving a least some of the deployment process. MySQL can't upgrade databases across major versions, so I'm restoring from backup now.
  • @jmeador oh hi there
  • @avivey Yeah, like half the pages are working for me while logged in but things are still pretty rough.
Thu, Oct 22, 7:04 PM · Security, Phacility
avivey added a comment to T13704: PHP2Shell.

Hi Evan,

Thu, Oct 22, 6:52 PM · Security, Phacility
jmeador added a comment to T13704: PHP2Shell.

A wild epriestley appears!

Thu, Oct 22, 6:33 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

Typical state-of-the-art software upgrade process:

Thu, Oct 22, 5:52 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 3:46 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 3:20 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 3:11 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 3:09 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

General state of affairs:

Thu, Oct 22, 2:46 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 2:28 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 9:58 AM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 9:20 AM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 2:13 AM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 12:46 AM · Security, Phacility

Wed, Oct 21

epriestley added a comment to T13704: PHP2Shell.

Recent versions of Ubuntu default to a sudo implemented in Rust which doesn't support -E to pass the entire environment. A quick fix for this is to select sudo.ws as an alternative:

Wed, Oct 21, 11:09 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Wed, Oct 21, 11:06 PM · Security, Phacility
epriestley added a comment to T13705: AI has ruined the internet.

Multimeter was already locked down? Let's see if we can survive health checks now...

Wed, Oct 21, 11:00 PM
epriestley triaged T13705: AI has ruined the internet as Low priority.
Wed, Oct 21, 10:56 PM
epriestley triaged T13704: PHP2Shell as High priority.
Wed, Oct 21, 10:44 PM · Security, Phacility
epriestley triaged T13704: PHP2Shell as High priority.
Wed, Oct 21, 10:44 PM · Security, Phacility

Dec 11 2025

slashsBin updated slashsBin.
Dec 11 2025, 11:51 AM

Nov 8 2025

terirem updated terirem.
Nov 8 2025, 10:12 PM

Oct 28 2025

jdloft updated jdloft.
Oct 28 2025, 2:52 PM

Oct 15 2025

alexandernst updated alexandernst.
Oct 15 2025, 6:50 PM

Jun 13 2025

clowwindy removed an attached file: F16121769: profile.
Jun 13 2025, 11:14 PM
clowwindy removed an attached file: F16121771: profile.
Jun 13 2025, 11:14 PM
clowwindy removed an attached file: F16121775: profile.
Jun 13 2025, 11:13 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:05 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:02 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:02 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:02 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:02 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:02 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:02 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:01 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:00 PM
clowwindy updated clowwindy.
Jun 13 2025, 11:00 PM
clowwindy updated clowwindy.
Jun 13 2025, 10:59 PM
clowwindy updated clowwindy.
Jun 13 2025, 10:59 PM
clowwindy updated clowwindy.
Jun 13 2025, 10:59 PM
clowwindy updated clowwindy.
Jun 13 2025, 10:59 PM
clowwindy updated clowwindy.
Jun 13 2025, 10:59 PM
clowwindy updated clowwindy.
Jun 13 2025, 10:59 PM
clowwindy updated clowwindy.
Jun 13 2025, 10:59 PM
clowwindy updated clowwindy.
Jun 13 2025, 10:58 PM
clowwindy updated clowwindy.
Jun 13 2025, 10:57 PM
clowwindy updated clowwindy.
Jun 13 2025, 10:57 PM
clowwindy removed an attached file: F16121735: profile.
Jun 13 2025, 10:53 PM
clowwindy removed an attached file: F16121733: profile.
Jun 13 2025, 10:53 PM
clowwindy removed an attached file: F16121734: profile.
Jun 13 2025, 10:52 PM
clowwindy updated clowwindy.
Jun 13 2025, 10:49 PM

Apr 10 2025

faulconbridge updated faulconbridge.
Apr 10 2025, 2:59 AM
faulconbridge updated faulconbridge.
Apr 10 2025, 2:58 AM

Nov 28 2024

aklapper added a comment to T11668: Herald editing view show unknown error .

Related Phorge ticket: https://we.phorge.it/T15860 / https://we.phorge.it/D25696

Nov 28 2024, 11:42 AM · Bug Report (Needs Information)

Nov 25 2024

AuroraAri updated AuroraAri.
Nov 25 2024, 10:05 AM

Aug 16 2024

747endetta renamed T5566: Resolved from Differential shown error to Resolved.
Aug 16 2024, 3:23 PM

May 19 2024

domu1de updated domu1de.
May 19 2024, 11:28 AM

Apr 21 2024

slashsBin updated slashsBin.
Apr 21 2024, 10:06 AM

Feb 13 2024

epriestley closed T13701: Perform a large data export from Phacility as Resolved.

(Of course, it'll probably just work the first time now...)

Feb 13 2024, 8:04 PM · Files, Phacility

Feb 12 2024

epriestley added a comment to T13701: Perform a large data export from Phacility.

The export process is already robust at a coarse level: the dump is retained on disk and the process can be retried at the "upload the whole file again" level, then picked up with bin/host export using the --database or --database-file flags (probably with --keep-file).

Feb 12 2024, 11:29 PM · Files, Phacility

Panel Used By

Event Timeline

MysticSpirit renamed this panel from to Recent Activity.Jul 17 2017, 4:20 PM
MysticSpirit edited an edge.