Hacker News Reader

Comment by yread | Hacker News Reader

DigiD.nl (login to government services), RTL (major broadcaster) and parliament shut down their websites. https://nos.nl/liveblog/2636066-websites-kwetsbaar-voor-soft...

View on HN

Looks GovCMS decided to do the same thing, that means the vast majority of Australian govt websites are now offline... insane stuff

I'd be worried about websites not shutting down immediately. It's better to wait few hours than being hacked.

The right choice for sure, the scale of this CVE is truly impressive.

Even worse, Tweakers as well :(

Not Tweakers!!

Seriously though. I don’t know what’s best. Taking everything down or not.. I just run a small time SaaS.

Take it down, nobody knows the risks of keeping things online at the moment.

Major Japanese services like pixiv and e-commerce platforms have elected to turn off services until patches are available. If you're smaller than pixiv, you can afford to go down for a few hours.

Aw, where's the fun in that! Much more interesting to apply random mitigations from untrusted sources like "bombcar" and then

    tail -F /var/log/access_log | grep --line-buffered -v -E '"(GET|HEAD) '

The risk is real and large.

And the work to clean up if you get compromised is massive.

At least Albert Heijn works! You can watch the web die with a 6pack pepernotencola

I've tried to take one website on a shared hoster down. But I actually can't disable PHP there at all. So no idea if just taking down the website will fix it. Probably PHP won't get executed if no .php files are served, but I'm not sure.

it's a shared host? So the hoster should have shut it down?

No, they don't just shut down websites. Might do more harm than good.

University of Vienna also took a lot offline. Seems it's getting patched fast now, though.

Edit: Or maybe not? At least one service on their IT-department's list seems to be working again. :-)

Reply on news.ycombinator.com