Re: Style rule change?

2012-01-09 Thread HyperHacker
On Sun, Jan 8, 2012 at 23:29, William A. Rowe Jr. wr...@rowe-clan.net wrote: On 1/8/2012 12:04 PM, Guenter Knauf wrote: on the other side: I've asked me already often if we shouldnt increase the maxchar/line; I believe that would in many cases greatly increase readability ... and honestly:

Re: Error codes

2011-11-30 Thread HyperHacker
On Wed, Nov 30, 2011 at 01:09, Stefan Fritsch s...@sfritsch.de wrote: On Wednesday 30 November 2011, Guenter Knauf wrote: Am 30.11.2011 01:51, schrieb William A. Rowe Jr.: On 11/29/2011 5:30 PM, Stefan Fritsch wrote: Currently my scripts produces:

Re: mod_lua Filter Hook?

2011-06-15 Thread HyperHacker
On Wed, Jun 15, 2011 at 15:34, Joachim Zobel jzo...@heute-morgen.de wrote: On Wed, 2011-06-15 at 17:04 -0400, Akins, Brian wrote: For filters, etc, not sure we really need buckets in Lua.  Maybe just represent them as a table of buffers or something simple like that. This misses my

Re: a plan mod_lua and 2.4

2011-03-19 Thread HyperHacker
On Sat, Mar 19, 2011 at 04:57, Dan Poirier poir...@pobox.com wrote: On Tue. 2011-03-15 at 09:08 AM EDT, Akins, Brian brian.ak...@turner.com wrote: How many people actual run mod_lua (or a derivative/relative) in production? Am I the only one on a real site? I guess the others, if any,

Re: a plan mod_lua and 2.4

2011-03-15 Thread HyperHacker
On Tue, Mar 15, 2011 at 07:08, Akins, Brian brian.ak...@turner.com wrote: On 3/14/11 7:51 PM, Brian McCallister bri...@skife.org wrote: I think the right path for this is to shrink the core mod_lua module to be the *minimal* set for integration, and pull all the higher level functionality

Re: a plan mod_lua and 2.4

2011-03-15 Thread HyperHacker
On Tue, Mar 15, 2011 at 08:05, Dan Poirier poir...@pobox.com wrote: On Tue. 2011-03-15 at 09:36 AM EDT, HyperHacker hyperhac...@gmail.com wrote: I've been eagerly looking forward to a stable mod_lua with which to make my sites. If done well, Lua could replace PHP as the #1 web scripting

Re: rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-09-03 Thread HyperHacker
On Fri, Sep 3, 2010 at 03:49, Graham Leggett minf...@sharp.fm wrote: On 03 Sep 2010, at 5:31 AM, dave b wrote: Sure ok :) You have no complains from me really here. Just this could be an issue on some platform with some mods potentially :) In order to understand why it isn't an issue for

Re: rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-09-03 Thread HyperHacker
On Fri, Sep 3, 2010 at 07:12, Graham Leggett minf...@sharp.fm wrote: On 03 Sep 2010, at 2:37 PM, HyperHacker wrote: ...assuming he attacks a single httpd thread, as opposed to say a distributed attack or attack on an unrelated process. How would a distributed attack be different? Obviously

Re: rational behind not checking the return value of apr_palloc and apr_pcalloc

2010-09-03 Thread HyperHacker
On Fri, Sep 3, 2010 at 13:24, dave b db.pub.m...@gmail.com wrote: first the attacker has to find  a way to reduce system memory to an almost oom condition Say, by attacking several httpd threads and/or unrelated processes to get them to eat up memory. -- Sent from my toaster. If you know

Re: C as config

2010-06-08 Thread HyperHacker
On Tue, Jun 8, 2010 at 09:34, Akins, Brian brian.ak...@turner.com wrote: On 6/8/10 8:07 AM, Dan Poirier poir...@pobox.com wrote: That's a shame.  I wonder if another embedded language would do better? E.g. mod_perl, mod_python?  They've both been around for a while. I wonder why neither has

Re: Fast by default

2010-06-01 Thread HyperHacker
On Tue, Jun 1, 2010 at 16:25, Sergey Chernyshev sergey.chernys...@gmail.com wrote: This sounds scary! How do large companies enable gzip then? How many hoops do they jump through? sounds like those hoops are in thousands! And I don't understand how one company's setup would be different from

Re: Is this possible ?

2010-05-20 Thread HyperHacker
On Thu, May 20, 2010 at 08:23, exp...@hope.cz wrote:  Let’s suppose this configuration  |Server1| - |Server2| - |Client|  A client sends a request that starts a script on Server2.The script ( running on server2)  will download a webpage from Server1.  Is it possible to record

Re: Reducing number of mod_lua hook directives

2010-05-11 Thread HyperHacker
On Tue, May 11, 2010 at 06:52, Dan Poirier poir...@pobox.com wrote: On 2010-05-10 at 16:03, William A. Rowe Jr. wr...@rowe-clan.net wrote: On 5/10/2010 2:25 PM, Brian McCallister wrote: ... to LuaHook AccessChecker /path/to/script.lua  funcname LuaHook AuthChecker   /path/to/script.lua  

Re: Reducing number of mod_lua hook directives

2010-05-11 Thread HyperHacker
On Tue, May 11, 2010 at 08:47, Dan Poirier poir...@pobox.com wrote: On 2010-05-11 at 08:52, Dan Poirier poir...@pobox.com wrote: On 2010-05-10 at 16:03, William A. Rowe Jr. wr...@rowe-clan.net wrote: On 5/10/2010 2:25 PM, Brian McCallister wrote: ... to LuaHook AccessChecker

Re: Reducing number of mod_lua hook directives

2010-05-11 Thread HyperHacker
On Tue, May 11, 2010 at 20:12, Dan Poirier poir...@pobox.com wrote: On 2010-05-11 at 12:55, HyperHacker hyperhac...@gmail.com wrote: On Tue, May 11, 2010 at 08:47, Dan Poirier poir...@pobox.com wrote: I just thought of a problem - right now, the funcname is optional (defaults to handle).  I

Re: slowloris mitigation

2010-04-14 Thread HyperHacker
I haven't used it, but if mod_reqtimeout makes it entirely redundant, my vote would be to keep it in trunk only. People interested in how the attack/defence work can look at it, and there might be those who for some reason don't want mod_reqtimeout. -- Sent from my toaster.

Re: svn commit: r925858 - in /httpd/httpd/branches/2.2.x: CHANGES STATUS docs/manual/mod/core.xml server/config.c

2010-03-21 Thread HyperHacker
On Sun, Mar 21, 2010 at 14:28, William A. Rowe Jr. wr...@apache.org wrote: On 3/21/2010 3:14 PM, William A. Rowe Jr. wrote: Include conf/empty/* Include conf/*/whoops.conf The last one (based on an existing conf/empty directive) fails, alerting the admin to the fact that they made a

What happened to mod_lua?

2010-03-07 Thread HyperHacker
A while back I had the idea that Lua would be a great scripting language for web servers. I checked Google, and several pages mentioned a recently developed Apache httpd module that does just that. However, even months later, all a search finds is a couple blogs and sites talking about the next