Page MenuHomePhabricator

PhacilityOrganization
ActivePublic

Details

Description

Phabricator SaaS

Recent Activity

Sun, Nov 1

epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Sun, Nov 1, 1:02 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Sun, Nov 1, 1:01 PM · Security, Phacility

Sat, Oct 24

epriestley updated the task description for T13706: php2shell: Phacility Cluster ops notes.
Sat, Oct 24, 2:49 AM · Phacility

Fri, Oct 23

epriestley added a comment to T13706: php2shell: Phacility Cluster ops notes.

Piledriver sequence is roughly:

Fri, Oct 23, 10:55 PM · Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Fri, Oct 23, 4:30 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

Found one, creating a new project returns:

Fri, Oct 23, 4:26 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Fri, Oct 23, 4:23 PM · Security, Phacility
epriestley triaged T13706: php2shell: Phacility Cluster ops notes as Normal priority.
Fri, Oct 23, 3:44 PM · Phacility
holmboe added a comment to T13704: PHP2Shell.

Found one, creating a new project returns:

Fri, Oct 23, 3:30 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

I suspect a lot of behavior is still broken, but at least some things should be working now. I'm working on restoring SSH access to repositories (which I suspect is just an ops/config issue) and then I'll fix whatever shows up in the error log.

Fri, Oct 23, 3:23 PM · Security, Phacility
holmboe added a comment to T13704: PHP2Shell.

We are live! Thank you Evan for your relentless work. 🙏

Fri, Oct 23, 3:17 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Fri, Oct 23, 3:16 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.
  • Restoring MySQL from backup took a very long time (partly because I didn't realize the volume was an ancient gp2 volume with a tight limit on iops) but succeeded.
  • admin is back up and cluster directory services are mostly working.
  • I'm working on redeploying web now; this tier is stateless and doesn't need to load backups.
  • The most recent available backup was slightly out of date (Oct 16th IIRC). If this caused issues (e.g., double-billing or deleting recently-invited user accounts) I'll sort everything out once services are back up.
Fri, Oct 23, 3:01 PM · Security, Phacility

Thu, Oct 22

epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 11:21 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 11:18 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 11:14 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

One issue I'm struggling with is that some daemon parsing is failing...

Thu, Oct 22, 11:08 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 10:23 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 10:17 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

One issue I'm struggling with is that some daemon parsing is failing:

Thu, Oct 22, 10:13 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

Actually, Phabricator uses static::class since D21744 and it works in older PHP per 3v4l.org, so I think I'm incorrect that this requires PHP 8.

Thu, Oct 22, 9:35 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 9:32 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

See T13637. See T13588. In PHP 8.1, the behavior of static variables in methods changed, per this snippet from the PHP Documentation:

Thu, Oct 22, 9:19 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 8:59 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 8:44 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 8:25 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

I do want $array[null] to kill the server in the general case so all the high-quality Phabricator code I write in the future can't do it, but I realize I may need to concede and silence the error. I am going to give up on this one:

Thu, Oct 22, 7:09 PM · Security, Phacility
avivey added a comment to T13704: PHP2Shell.

also maybe copy https://we.phorge.it/D25387, which makes it so deprecation
messages don't kill the server.

Thu, Oct 22, 7:04 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.
  • AWS now has over 800 instance types???
  • I believe I've launched a new admin with a patched PHP that is surviving a least some of the deployment process. MySQL can't upgrade databases across major versions, so I'm restoring from backup now.
  • @jmeador oh hi there
  • @avivey Yeah, like half the pages are working for me while logged in but things are still pretty rough.
Thu, Oct 22, 7:04 PM · Security, Phacility
avivey added a comment to T13704: PHP2Shell.

Hi Evan,

Thu, Oct 22, 6:52 PM · Security, Phacility
jmeador added a comment to T13704: PHP2Shell.

A wild epriestley appears!

Thu, Oct 22, 6:33 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

Typical state-of-the-art software upgrade process:

Thu, Oct 22, 5:52 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 3:46 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 3:20 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 3:11 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 3:09 PM · Security, Phacility
epriestley added a comment to T13704: PHP2Shell.

General state of affairs:

Thu, Oct 22, 2:46 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 2:28 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 9:58 AM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 9:20 AM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 2:13 AM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Thu, Oct 22, 12:46 AM · Security, Phacility

Wed, Oct 21

epriestley added a comment to T13704: PHP2Shell.

Recent versions of Ubuntu default to a sudo implemented in Rust which doesn't support -E to pass the entire environment. A quick fix for this is to select sudo.ws as an alternative:

Wed, Oct 21, 11:09 PM · Security, Phacility
epriestley added a revision to T13704: PHP2Shell: Restricted Differential Revision.
Wed, Oct 21, 11:06 PM · Security, Phacility
epriestley triaged T13704: PHP2Shell as High priority.
Wed, Oct 21, 10:44 PM · Security, Phacility
epriestley triaged T13704: PHP2Shell as High priority.
Wed, Oct 21, 10:44 PM · Security, Phacility

Feb 13 2024

epriestley closed T13701: Perform a large data export from Phacility as Resolved.

(Of course, it'll probably just work the first time now...)

Feb 13 2024, 8:04 PM · Files, Phacility

Feb 12 2024

epriestley added a comment to T13701: Perform a large data export from Phacility.

The export process is already robust at a coarse level: the dump is retained on disk and the process can be retried at the "upload the whole file again" level, then picked up with bin/host export using the --database or --database-file flags (probably with --keep-file).

Feb 12 2024, 11:29 PM · Files, Phacility
epriestley added a comment to T13701: Perform a large data export from Phacility.

The (anonymized) error the process encountered occurred while transferring the dump to central storage was:

Feb 12 2024, 11:19 PM · Files, Phacility
epriestley triaged T13701: Perform a large data export from Phacility as Low priority.
Feb 12 2024, 11:10 PM · Files, Phacility