www.devco.net by r.i.pienaar

31Mar/040

Apache 2.0 and PHP

I have had many conversations with people who believe that Apache 2.0 is a good server to run PHP under and never had enough ammunition to answer back at them. Well now thanks to Simon Willison I have it:

I finally found the answer today in this comment buried on Slashdot. It seems that one of the key features of Apache 2 is the new threaded worker module which uses threads to serve more requests more efficiently than 1.3's multi-process based server. While the core Zend engine of PHP is thread-safe many of the critical libraries that PHP relies on for its advanced functionality (image processing, database connectivity and so forth) are not, and are unlikely to become so any time in the future. In a threaded environment PHP is likely to suffer from all kinds of unpredictable bugs. Apache 2 can be run in traditional 1.3-style prefork mode but doing so greatly reduces its advantages over 1.3. Combined with the lack of heavy duty testing on Apache 2 and the fact that the 1.3 series will continue to be supported for a long time to come it's clear why PHP team are unwilling to recommend PHP and Apache 2 in a production environment.

This makes me wonder about all these so called enterprise ready Linux Distro's that ship PHP in Apache 2.0 as a stable solution.

Tagged as: , , No Comments
26Mar/0418

MS Word Password Protection Bypass

Hooray for Microsoft, seems the much loved MS Word password protection is pretty lame (it's not like anyone would trust this would they? The mind boggles)

Example 1
1) Open MS Word with a new/blank page
2) Now select "Insert" >> "File" >> browse for your password protected doc select "Insert" & "Insert" password protected doc into your new/blank doc
3) Now select "Tools" & Whey hey, voila, there's no longer an "Unprotect document" ... password vanished ...

Read the full sad story here

Tagged as: , 18 Comments
22Mar/040

3000 browser hits

Today I clocked up 3 000 hits by actual browsers on my PPhlogger. It has been just under 3 months since I got 1 000 hits on the 7th of January 2004 which shows a good growth curve.
The lucky 3 000'th visitor was someone looking for Nikon D70 information.

Tagged as: No Comments
22Mar/040

Nikon D70

Today I finally received my Nikon D70. There is an absolute frenzy in London as anyone who has any stock have been flooded with calls about it.
I had one booked at a shop who was wanting £950 inc for it, but then another got stock before the first shop did. They were selling it for £869 and had 9, 8 was on pre-order so I got the last one.
Now that they are also out of stock they put the price up to £999 so that's a nice big bit of inflation there :)

16Mar/040

New issue of 28mm

A new issue of 28mm has become available after a few months of absence, this issue contains one gallery entitled ARKHEE by Eolo Perfido that is absolutely stunning.
28mm showcases work by amateur and professional photographers and comes out when enough material has been submitted.

4Mar/040

Furl It!

I came across Furl via blog.org. Furl is a fantastic tool for storing bookmarks on-line, you simply drag a bookmarklet onto your browser and any site you come across you just hit the "Furl It" button, this creates a popup window that lets you file the url into your bookmarks list.
The bookmarks list can be shared in many ways, people can view it directly on the Furl servers via the web, you can send e-mail updates and you can even subscribe to a RSS feed of someone else's links. Excellent, I am hooked!

Tagged as: No Comments
3Mar/040

FreeBSD DOS affecting all releases

A new security advisory has been released by the FreeBSD team that affects all versions of the operating system.

I. Background
The Transmission Control Protocol (TCP) of the TCP/IP protocol suite
provides a connection-oriented, reliable, sequence-preserving data
stream service. When network packets making up a TCP stream (``TCP
segments'') are received out-of-sequence, they are maintained in a
reassembly queue by the destination system until they can be re-ordered
and re-assembled.
II. Problem Description
FreeBSD does not limit the number of TCP segments that may be held in a
reassembly queue.
III. Impact
A remote attacker may conduct a low-bandwidth denial-of-service attack
against a machine providing services based on TCP (there are many such
services, including HTTP, SMTP, and FTP). By sending many
out-of-sequence TCP segments, the attacker can cause the target machine
to consume all available memory buffers (``mbufs''), likely leading to
a system crash.

They supply patches for FreeBSD 4.8, 4.9 and 5.2 and you can either apply those and rebuild just the kernel or upgrade your world to recent releases.