Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Actually no, DPR's knowledge of how to configure nginx was shown to be lacking.


The particular mistake:

https://twitter.com/matthew_d_green/status/51784845258024550...

> So this reads as 'allow PHP files to be read from any IP', 'anything else is limited to 62.75.246.20'.

I don't get why Krebs hasn't updated his article. There's enough misinformation about this case floating around already.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: