Dominic Scheirlinck

Well, explaining that it’s not a PHP issue is exactly the point of those paragraphs. We thought it was a PHP security issue until we found all the historical mentions, and it broadened our thinking on the matter (it’s a “CGI application-code vulnerability”, as we say elsewhere.)

How “The Internet’s Biggest Blind Spot” lead to a 15 year old security vulnerability

Discovering and Disclosing httpoxy

Over the past two weeks, I’ve been coordinating the disclosure of a pretty big and very old security…

What is httpoxy?

An explanation for non-technical audiences

Hi! I’ve been telling the open source community about a security vulnerability that was recently rediscovered lurking in a bunch of software. This is an attempt at a simple explanation of the problem…