Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:79891
Return-Path: <pierre.php@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 70820 invoked from network); 23 Dec 2014 19:51:23 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 23 Dec 2014 19:51:23 -0000
Authentication-Results: pb1.pair.com smtp.mail=pierre.php@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=pierre.php@gmail.com; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.216.50 as permitted sender)
X-PHP-List-Original-Sender: pierre.php@gmail.com
X-Host-Fingerprint: 209.85.216.50 mail-qa0-f50.google.com  
Received: from [209.85.216.50] ([209.85.216.50:46357] helo=mail-qa0-f50.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 4A/80-01814-9B7C9945 for <internals@lists.php.net>; Tue, 23 Dec 2014 14:51:21 -0500
Received: by mail-qa0-f50.google.com with SMTP id dc16so4779073qab.37
        for <internals@lists.php.net>; Tue, 23 Dec 2014 11:51:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        bh=1S2sbnJlL/thsMhfzxAtionmTWJgAdPIw++arkwkxQA=;
        b=GG2jTzKO0efoES/ZocOpl6ENYDYmkIv/2LaoLYql5XjsHDvzcoMxfEtyVpZ2H0Q3Zs
         Liz8z1uGDyxr346Qkdzv+KkFfN11E6i8PFl+yD/Dxj2bk7F/6qgrz3vhf/M/ef4pSBuc
         Ff+pYnc841dVcSJAQS61siFSLiNC/bhF3GIgSGUR709+XTEMfh5A0h9TTTfaIUZPkZno
         DZfDLl2G6riyqU+AgU28suxb1xApe6gRkyGaverPQEzr84NvQlZP1MxsvCNszbiizIg4
         X/aWR4aXew73osUX8BuY5/Zf1cvP5Gw28iuldRlfL2DC7UJiQQ15ZXsQe+Abls2IpVx0
         vKtA==
MIME-Version: 1.0
X-Received: by 10.229.37.136 with SMTP id x8mr48510562qcd.30.1419364278713;
 Tue, 23 Dec 2014 11:51:18 -0800 (PST)
Received: by 10.140.22.106 with HTTP; Tue, 23 Dec 2014 11:51:18 -0800 (PST)
Received: by 10.140.22.106 with HTTP; Tue, 23 Dec 2014 11:51:18 -0800 (PST)
In-Reply-To: <CAPKwhwsNbjeiMjb=yxNOVAXTBGWpT+Cm6X5Q1peT=_TOLGThxg@mail.gmail.com>
References: <CAPKwhwsNbjeiMjb=yxNOVAXTBGWpT+Cm6X5Q1peT=_TOLGThxg@mail.gmail.com>
Date: Wed, 24 Dec 2014 06:51:18 +1100
Message-ID: <CAEZPtU7UfK7CApn=86q-G3WS1uKpiuVqLy7fdwv1vg5v0kDt7Q@mail.gmail.com>
To: Scott Arciszewski <kobrasrealm@gmail.com>
Cc: PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a1133b572a3c3dc050ae77f4b
Subject: Re: [PHP-DEV] JSON HASHDOS
From: pierre.php@gmail.com (Pierre Joye)

--001a1133b572a3c3dc050ae77f4b
Content-Type: text/plain; charset=UTF-8

This issue has been reported earlier on security@php.net and is being
discussed and analyzed. It is not a simple task.

I have to thank the reporter to have it done the right way.

Maybe Lukas can learn from them for his next report.

Cheers,
Pierre
On Dec 23, 2014 11:20 PM, "Scott Arciszewski" <kobrasrealm@gmail.com> wrote:

> http://lukasmartinelli.ch/web/2014/11/17/php-dos-attack-revisited.html
>
> Sigh
>

--001a1133b572a3c3dc050ae77f4b--