Page MenuHomePhabricator
Feed All Stories

Yesterday

epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Sun, Nov 1, 1:02 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Sun, Nov 1, 1:01 PM · Security, Phacility

Sat, Oct 24

epriestley updated the task description for T13706: php2shell: Phacility Cluster ops notes.
Sat, Oct 24, 2:49 AM · Phacility

Fri, Oct 23

epriestley added a comment to T13706: php2shell: Phacility Cluster ops notes.

Piledriver sequence is roughly:

Fri, Oct 23, 10:55 PM · Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Fri, Oct 23, 4:30 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

Found one, creating a new project returns:

Fri, Oct 23, 4:26 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Fri, Oct 23, 4:23 PM · Security, Phacility
epriestley triaged T13706: php2shell: Phacility Cluster ops notes as Normal priority.
Fri, Oct 23, 3:44 PM · Phacility
holmboe added a comment to T13704: PHP2Shell.

Found one, creating a new project returns:

Fri, Oct 23, 3:30 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

I suspect a lot of behavior is still broken, but at least some things should be working now. I'm working on restoring SSH access to repositories (which I suspect is just an ops/config issue) and then I'll fix whatever shows up in the error log.

Fri, Oct 23, 3:23 PM · Security, Phacility
holmboe added a comment to T13704: PHP2Shell.

We are live! Thank you Evan for your relentless work. 🙏

Fri, Oct 23, 3:17 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Fri, Oct 23, 3:16 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.
  • Restoring MySQL from backup took a very long time (partly because I didn't realize the volume was an ancient gp2 volume with a tight limit on iops) but succeeded.
  • admin is back up and cluster directory services are mostly working.
  • I'm working on redeploying web now; this tier is stateless and doesn't need to load backups.
  • The most recent available backup was slightly out of date (Oct 16th IIRC). If this caused issues (e.g., double-billing or deleting recently-invited user accounts) I'll sort everything out once services are back up.
Fri, Oct 23, 3:01 PM · Security, Phacility

Thu, Oct 22

epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 11:21 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 11:18 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 11:14 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

One issue I'm struggling with is that some daemon parsing is failing...

Thu, Oct 22, 11:08 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 10:23 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 10:17 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

One issue I'm struggling with is that some daemon parsing is failing:

Thu, Oct 22, 10:13 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

Actually, Phabricator uses static::class since D21744 and it works in older PHP per 3v4l.org, so I think I'm incorrect that this requires PHP 8.

Thu, Oct 22, 9:35 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 9:32 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

See T13637. See T13588. In PHP 8.1, the behavior of static variables in methods changed, per this snippet from the PHP Documentation:

Thu, Oct 22, 9:19 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 8:59 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 8:44 PM · Security, Phacility
epriestley added a comment to T13705: AI has ruined the internet.
ubuntu@secure-01a4c8f6:/core$ grep '22/Oct/2026' /var/log/apache2/other_vhosts_access.log | wc -l
1032536
ubuntu@secure-01a4c8f6:/core$ grep '22/Oct/2026' /var/log/apache2/other_vhosts_access.log | grep developers.facebook.com | wc -l
140014
ubuntu@secure-01a4c8f6:/core$ grep '22/Oct/2026' /var/log/apache2/other_vhosts_access.log | grep reflection.ai | wc -l
69485
ubuntu@secure-01a4c8f6:/core$ grep '22/Oct/2026' /var/log/apache2/other_vhosts_access.log | grep go/applebot | wc -l
8978
Thu, Oct 22, 8:33 PM
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 8:25 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

I do want $array[null] to kill the server in the general case so all the high-quality Phabricator code I write in the future can't do it, but I realize I may need to concede and silence the error. I am going to give up on this one:

Thu, Oct 22, 7:09 PM · Security, Phacility
avivey added a comment to T13704: PHP2Shell.

also maybe copy https://we.phorge.it/D25387, which makes it so deprecation
messages don't kill the server.

Thu, Oct 22, 7:04 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.
  • AWS now has over 800 instance types???
  • I believe I've launched a new admin with a patched PHP that is surviving a least some of the deployment process. MySQL can't upgrade databases across major versions, so I'm restoring from backup now.
  • @jmeador oh hi there
  • @avivey Yeah, like half the pages are working for me while logged in but things are still pretty rough.
Thu, Oct 22, 7:04 PM · Security, Phacility
avivey added a comment to T13704: PHP2Shell.

Hi Evan,

Thu, Oct 22, 6:52 PM · Security, Phacility
jmeador added a comment to T13704: PHP2Shell.

A wild epriestley appears!

Thu, Oct 22, 6:33 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

Typical state-of-the-art software upgrade process:

Thu, Oct 22, 5:52 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 3:46 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 3:20 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 3:11 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 3:09 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

General state of affairs:

Thu, Oct 22, 2:46 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 2:28 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 9:58 AM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Unknown Object (Differential Revision).
Thu, Oct 22, 9:20 AM · Security, Phacility