PHP from the point of view of a webhoster

•Transferir como ODP, PDF•

0 gostou•709 visualizações

Dominic Lüchinger

point of view of a webhoster speaking @webilea

About me ,[object Object]

Developer and #devops

Study computer science at Uni Basel

Linux user

mod_rewrite guru

NBA Jam addicted

Overview ,[object Object]

Why so famous ?

PHP on a server

Security

Worries and concerns

Summary / Q&A

PHP in 20 seconds ,[object Object]

Introduced in 1995 ,[object Object]

PHP5 2004 -> OOP, PDO, JSON, performance

Mais conteúdo relacionado

Mais procurados

Conference: InsomniHack (21 March 2014) Talk speakers: Michele Orru (@antisnatchor) Krzysztof Kotowicz (@kkotowicz) Talk abstract: A bag of fresh and juicy 0days is certainly something you would love to get as a Christmas present, but it would probably be just a dream you had one of those drunken nights. Hold on! Not all is lost! There is still hope for pwning targets without 0days. We will walk you through multiple real-life examples of client-side pwnage, from tricking the victim to take the bait, to achieving persistence on the compromised system. The talk will be highly practical and will demonstrate how you can do proper client-side exploitation effectively, simply by abusing existing functionalities of browsers, extensions, legacy features, etc. We'll delve into Chrome and Firefox extensions (automating various repetitive actions that you'll likely perform in your engagements), HTML applications, abusing User Interface expectations, (Open)Office macros and more. All the attacks are supposed to work on fully patched target software, with a bit of magic trickery as the secret ingredient. You might already know some of these exploitation vectors, but you might need a way to automate your attacks and tailor them based on the victim language, browser, and whatnot. Either way, if you like offensive security, then this talk is for you.

When you don't have 0days: client-side exploitation for the masses

When you don't have 0days: client-side exploitation for the masses

When you don't have 0days: client-side exploitation for the masses

Browser Security by pratimesh Pathak ( Buldhana)

Browser Security by pratimesh Pathak ( Buldhana)

Browser Security by pratimesh Pathak ( Buldhana)

Pratimesh Pathak

Undertow 맛보기

Undertow 맛보기

Undertow 맛보기

10 things I’ve learnt about web application security

10 things I’ve learnt about web application security

10 things I’ve learnt about web application security

Inter-protocol Exploitation removes browser-based attacks from being dependent upon browser vulnerabilities. It increases the number of potential exploits to include many service vulnerabilities throughout the internal corporate network. This includes whatever service can be contacted via a browser request. Multiple protocols like IMAP, SMTP, POP, SIP, IRC and others are "tolerant" to errors, and they don't reset the connection with the client if they receive data that is not compliant with the protocol grammar. This leads to the possibility of interacting with such protocols with HTTP requests, even without the need of a SOP bypass. During the talk, we will see a demonstration on how to compromise an IMAP server that sits in the victim's internal network through its browser hooked in BeEF. This will include disabling the browser's PortBanning, identifying the victim's internal network IP and the live hosts in the subnet, followed by a port scan and finally sending the custom BeEF Bind shellcode after the IMAP service has been localized.

Rooting Your Internals: Inter-Protocol Exploitation, custom shellcode and BeEF

Rooting Your Internals: Inter-Protocol Exploitation, custom shellcode and BeEF

Rooting Your Internals: Inter-Protocol Exploitation, custom shellcode and BeEF

Secuirty News Bytes-Bangalore may 2014

Secuirty News Bytes-Bangalore may 2014

Secuirty News Bytes-Bangalore may 2014

n|u - The Open Security Community

BeEF: The Browser Exploitation Framework

BeEF: The Browser Exploitation Framework

BeEF: The Browser Exploitation Framework

Wp Presentation

Wp Presentation

Wp Presentation

[Php Camp]Owasp Php Top5+Csrf

[Php Camp]Owasp Php Top5+Csrf

[Php Camp]Owasp Php Top5+Csrf

Palestra realizada por Neal Mokrane aka nil0x42 durante a 3a. ediação da Nullbyte Security Conference em 26 de novembro de 2016 Resumo PhpSloit is a remote control framework, aiming to provide a stealth interactive shell-like connection over HTTP between client and web server. It is a post-exploitation tool capable to maintain access to a compromised web server for privilege escalation purposes. This talk will present common use cases of the framework from an offensive pentester point of view, on realistic cases, including: - post-exploitation with IDS/WAF bypass - persistent backdooring - log analysis evasion - stealth privilege escalation The final part will be dedicated to present a selection of the best plugins (imho) and the versatility of the tool on very specific use cases.

Stealth post-exploitation with phpsploit

Stealth post-exploitation with phpsploit

Stealth post-exploitation with phpsploit

Nullbyte Security Conference

Beef saurabh

Saurav Chaudhary

Browser security — ROOTS

Browser security — ROOTS

Browser security — ROOTS

Andre N. Klingsheim

Mais procurados (12)

When you don't have 0days: client-side exploitation for the masses

When you don't have 0days: client-side exploitation for the masses

When you don't have 0days: client-side exploitation for the masses

Browser Security by pratimesh Pathak ( Buldhana)

Browser Security by pratimesh Pathak ( Buldhana)

Browser Security by pratimesh Pathak ( Buldhana)

Undertow 맛보기

Undertow 맛보기

Undertow 맛보기

10 things I’ve learnt about web application security

10 things I’ve learnt about web application security

10 things I’ve learnt about web application security

Rooting Your Internals: Inter-Protocol Exploitation, custom shellcode and BeEF

Rooting Your Internals: Inter-Protocol Exploitation, custom shellcode and BeEF

Rooting Your Internals: Inter-Protocol Exploitation, custom shellcode and BeEF

Secuirty News Bytes-Bangalore may 2014

Secuirty News Bytes-Bangalore may 2014

Secuirty News Bytes-Bangalore may 2014

BeEF: The Browser Exploitation Framework

BeEF: The Browser Exploitation Framework

BeEF: The Browser Exploitation Framework

Wp Presentation

Wp Presentation

Wp Presentation

[Php Camp]Owasp Php Top5+Csrf

[Php Camp]Owasp Php Top5+Csrf

[Php Camp]Owasp Php Top5+Csrf

Stealth post-exploitation with phpsploit

Stealth post-exploitation with phpsploit

Stealth post-exploitation with phpsploit

Beef saurabh

Browser security — ROOTS

Browser security — ROOTS

Browser security — ROOTS

Destaque

Social Media Analytics – Aktuelle Herausforderung

Social Media Analytics – Aktuelle Herausforderung

Social Media Analytics – Aktuelle Herausforderung

Barcelona

Building a fully API-based platform on top of cPanel

Building a fully API-based platform on top of cPanel

Building a fully API-based platform on top of cPanel

Dominic Lüchinger

Letter to the judges

Letter to the judges

Letter to the judges

Nicht Alle Tage

Nicht Alle Tage

Nicht Alle Tage

XMPP - Real Time Communication

XMPP - Real Time Communication

XMPP - Real Time Communication

Dominic Lüchinger

We asked LinkedIn members worldwide about their levels of interest in the latest wave of technology: whether they’re using wearables, and whether they intend to buy self-driving cars and VR headsets as they become available. We asked them too about their attitudes to technology and to the growing role of Artificial Intelligence (AI) in the devices that they use. The answers were fascinating – and in many cases, surprising. This SlideShare explores the full results of this study, including detailed market-by-market breakdowns of intention levels for each technology – and how attitudes change with age, location and seniority level. If you’re marketing a tech brand – or planning to use VR and wearables to reach a professional audience – then these are insights you won’t want to miss.

Study: The Future of VR, AR and Self-Driving Cars

Study: The Future of VR, AR and Self-Driving Cars

Study: The Future of VR, AR and Self-Driving Cars

Destaque (7)

Social Media Analytics – Aktuelle Herausforderung

Social Media Analytics – Aktuelle Herausforderung

Social Media Analytics – Aktuelle Herausforderung

Barcelona

Building a fully API-based platform on top of cPanel

Building a fully API-based platform on top of cPanel

Building a fully API-based platform on top of cPanel

Letter to the judges

Letter to the judges

Letter to the judges

Nicht Alle Tage

Nicht Alle Tage

Nicht Alle Tage

XMPP - Real Time Communication

XMPP - Real Time Communication

XMPP - Real Time Communication

Study: The Future of VR, AR and Self-Driving Cars

Study: The Future of VR, AR and Self-Driving Cars

Study: The Future of VR, AR and Self-Driving Cars

Semelhante a PHP from the point of view of a webhoster

Intro to Perfect - LA presentation

Intro to Perfect - LA presentation

Intro to Perfect - LA presentation

PHP Frameworks, or how I learnt to stop worrying and love the code

PHP Frameworks, or how I learnt to stop worrying and love the code

PHP Frameworks, or how I learnt to stop worrying and love the code

PHP is the King, nodejs is the Prince and Lua is the fool

PHP is the King, nodejs is the Prince and Lua is the fool

PHP is the King, nodejs is the Prince and Lua is the fool

Alessandro Cinelli (cirpo)

Benedicta_Resume

Benedicta_Resume

Benedicta_Resume

Art of Web Backdoor - Pichaya Morimoto

Art of Web Backdoor - Pichaya Morimoto

Art of Web Backdoor - Pichaya Morimoto

Pichaya Morimoto

Secure programming with php

Secure programming with php

Secure programming with php

Os Henrikson

Php Frameworks

Secure PHP Coding

Secure PHP Coding

Secure PHP Coding

Narudom Roongsiriwong, CISSP

Phpyahoo

cainacinacniacnian

This presentation shall address the web2py web framework, my favorite way to develop web apps. web2py is a free, open-source web framework for agile development of secure database-driven web applications; it is written in Python and programmable in Python. web2py is a full-stack framework, meaning that it contains all the components you need to build fully functional web applications. Ease of use is the primary goal for web2py. For us, this means reducing the learning and deployment time. This is why web2py is a full-stack framework without dependencies. It requires no installation and has no configuration files. Everything works out of the box, including a web server, database and a web-based IDE that gives access to all the main features. I will show you why web2py can make you more productive by bringing the result of a reflection over the best ideas of the most popular MVC based web frameworks enforcing the best practices for a fast, scalable and secure web application with minimal effort. There will be a live demo where you can get a faster grasp on how does it work and how fun it can be. For more: www.web2py.com

web2py:Web development like a boss

web2py:Web development like a boss

web2py:Web development like a boss

Francisco Ribeiro

Profiling PHP with Xdebug / Webgrind

Profiling PHP with Xdebug / Webgrind

Profiling PHP with Xdebug / Webgrind

DDD17 - Web Applications Automated Security Testing in a Continuous Delivery...

DDD17 - Web Applications Automated Security Testing in a Continuous Delivery...

DDD17 - Web Applications Automated Security Testing in a Continuous Delivery...

Let's look at ways how to make PHP applications remember what your user did on the last web page. The first half will be about the classic PHP sessions, what the SessionHandlerInterface is about and why all of it's methods are important for a successful alternative implementation. The second half will explore alternatives to the problems created using PHP sessions, including alternatives to sessions: Splitting the problem on the server or moving the data to the client.

PHP Sessions and Non-Sessions

PHP Sessions and Non-Sessions

PHP Sessions and Non-Sessions

Sven Rautenberg

Unusual Web Bugs

Unusual Web Bugs

Unusual Web Bugs

Web Bugs

Silverlight 4 @ MSDN Live

Silverlight 4 @ MSDN Live

Silverlight 4 @ MSDN Live

Web browsers have become part of everyday life, and are relied upon by millions of internet citizens each day. The feature rich online world has turned the once simple web browser into a highly complex (and very often insecure) desktop application. As browser vendors have extended functionality and support to new technologies, security researchers and hackers are continuously looking for new vulnerabilities. In this talk, Roberto and Scott will share results of their assiduous browser bug hunting. The talk will examine techniques used to discover critical and less severe vulnerabilities in some of the most popular browsers on the market. This talk will focus heavily (but not exclusively) on the following areas: - Memory corruption bugs; - New approaches to DOM fuzzing; - Old school techniques against new browser technology; - Cross Context Scripting and injection attacks; - SOP Bypass; The presentation will conclude with a montage of on-stage demonstrations of previously unreleased vulnerabilities, including remote code execution, injections and other tailored browser exploits.

Window Shopping Browser - Bug Hunting in 2012

Window Shopping Browser - Bug Hunting in 2012

Window Shopping Browser - Bug Hunting in 2012

Roberto Suggi Liverani

Hands on web development with play 2.0

Hands on web development with play 2.0

Hands on web development with play 2.0

Feb. 9, 2010 ICACT 2010@Phoenix Park, Korea

Feb. 9, 2010 ICACT 2010@Phoenix Park, Korea

Feb. 9, 2010 ICACT 2010@Phoenix Park, Korea

Semelhante a PHP from the point of view of a webhoster (20)

Intro to Perfect - LA presentation

Intro to Perfect - LA presentation

Intro to Perfect - LA presentation

PHP Frameworks, or how I learnt to stop worrying and love the code

PHP Frameworks, or how I learnt to stop worrying and love the code

PHP Frameworks, or how I learnt to stop worrying and love the code

PHP is the King, nodejs is the Prince and Lua is the fool

PHP is the King, nodejs is the Prince and Lua is the fool

PHP is the King, nodejs is the Prince and Lua is the fool

Benedicta_Resume

Benedicta_Resume

Benedicta_Resume

Art of Web Backdoor - Pichaya Morimoto

Art of Web Backdoor - Pichaya Morimoto

Art of Web Backdoor - Pichaya Morimoto

Secure programming with php

Secure programming with php

Secure programming with php

Os Henrikson

Php Frameworks

Secure PHP Coding

Secure PHP Coding

Secure PHP Coding

Phpyahoo

web2py:Web development like a boss

web2py:Web development like a boss

web2py:Web development like a boss

Profiling PHP with Xdebug / Webgrind

Profiling PHP with Xdebug / Webgrind

Profiling PHP with Xdebug / Webgrind

DDD17 - Web Applications Automated Security Testing in a Continuous Delivery...

DDD17 - Web Applications Automated Security Testing in a Continuous Delivery...

DDD17 - Web Applications Automated Security Testing in a Continuous Delivery...

PHP Sessions and Non-Sessions

PHP Sessions and Non-Sessions

PHP Sessions and Non-Sessions

Unusual Web Bugs

Unusual Web Bugs

Unusual Web Bugs

Web Bugs

Silverlight 4 @ MSDN Live

Silverlight 4 @ MSDN Live

Silverlight 4 @ MSDN Live

Window Shopping Browser - Bug Hunting in 2012

Window Shopping Browser - Bug Hunting in 2012

Window Shopping Browser - Bug Hunting in 2012

Hands on web development with play 2.0

Hands on web development with play 2.0

Hands on web development with play 2.0

Feb. 9, 2010 ICACT 2010@Phoenix Park, Korea

Feb. 9, 2010 ICACT 2010@Phoenix Park, Korea

Feb. 9, 2010 ICACT 2010@Phoenix Park, Korea

Último

Join our latest Connector Corner webinar to discover how UiPath Integration Service revolutionizes API-centric automation in a 'Quote to Cash' process—and how that automation empowers businesses to accelerate revenue generation. A comprehensive demo will explore connecting systems, GenAI, and people, through powerful pre-built connectors designed to speed process cycle times. Speakers: James Dickson, Senior Software Engineer Charlie Greenberg, Host, Product Marketing Manager

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

MINDCTI Revenue Release Quarter One 2024

MINDCTI Revenue Release Quarter One 2024

MINDCTI Revenue Release Quarter One 2024

Following the popularity of "Cloud Revolution: Exploring the New Wave of Serverless Spatial Data," we're thrilled to announce this much-anticipated encore webinar. In this sequel, we'll dive deeper into the Cloud-Native realm by uncovering practical applications and FME support for these new formats, including COGs, COPC, FlatGeoBuf, GeoParquet, STAC, and ZARR. Building on the foundation laid by industry leaders Michelle Roby of Radiant Earth and Chris Holmes of Planet in the first webinar, this second part offers an in-depth look at the real-world application and behind-the-scenes dynamics of these cutting-edge formats. We will spotlight specific use-cases and workflows, showcasing their efficiency and relevance in practical scenarios. Discover the vast possibilities each format holds, highlighted through detailed discussions and demonstrations. Our expert speakers will dissect the key aspects and provide critical takeaways for effective use, ensuring attendees leave with a thorough understanding of how to apply these formats in their own projects. Elevate your understanding of how FME supports these cutting-edge technologies, enhancing your ability to manage, share, and analyze spatial data. Whether you're building on knowledge from our initial session or are new to the serverless spatial data landscape, this webinar is your gateway to mastering cloud-native formats in your workflows.

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

This presentations targets students or working professionals. You may know Google for search, YouTube, Android, Chrome, and Gmail, but did you know Google has many developer tools, platforms & APIs? This comprehensive yet still high-level overview outlines the most impactful tools for where to run your code, store & analyze your data. It will also inspire you as to what's possible. This talk is 50 minutes in length.

Powerful Google developer tools for immediate impact! (2023-24 C)

Powerful Google developer tools for immediate impact! (2023-24 C)

Powerful Google developer tools for immediate impact! (2023-24 C)

presentation ICT roal in 21st century education

presentation ICT roal in 21st century education

presentation ICT roal in 21st century education

The Good, the Bad and the Governed - Why is governance a dirty word? David O'Neill, Chief Operating Officer - APIContext Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Building Digital Trust in a Digital Economy Veronica Tan, Director - Cyber Security Agency of Singapore Apidays Singapore 2024: Connecting Customers, Business and Technology (April 17 & 18, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

FWD Group - Insurer Innovation Award 2024

FWD Group - Insurer Innovation Award 2024

FWD Group - Insurer Innovation Award 2024

The Digital Insurer

MySQL Webinar, presented on the 25th of April, 2024. Summary: MySQL solutions enable the deployment of diverse Database Architectures tailored to specific needs, including High Availability, Disaster Recovery, and Read Scale-Out. With MySQL Shell's AdminAPI, administrators can seamlessly set up, manage, and monitor these solutions, ensuring efficiency and ease of use in their administration. MySQL Router, on the other hand, provides transparent routing from the application traffic to the backend servers in the architectures, requiring minimal configuration. Completely built in-house and supported by Oracle, these solutions have been adopted by enterprises of all sizes for their business-critical applications. In this presentation, we'll delve into various database architecture solutions to help you choose the right one based on your business requirements. Focusing on technical details and the latest features to maximize the potential of these solutions.

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Accelerating FinTech Innovation: Unleashing API Economy and GenAI Vasa Krishnan, Chief Technology Officer - FinResults Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

ICT role in 21st century education and its challenges

ICT role in 21st century education and its challenges

ICT role in 21st century education and its challenges

rafiqahmad00786416

Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows. We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases. This video focuses on the deployment of external web forms using Jotform for Bonterra Impact Management. This solution can be customized to your organization’s needs and deployed to support the common use cases below: - Intake and consent - Assessments - Surveys - Applications - Program registration Interested in deploying web form automations for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

Jeffrey Haguewood

Corporate and higher education. Two industries that, in the past, have had a clear divide with very little crossover. The difference in goals, learning styles and objectives paved the way for differing learning technologies platforms to evolve. Now, those stark lines are blurring as both sides are discovering they have content that’s relevant to the other. Join Tammy Rutherford as she walks through the pros and cons of corporate and higher ed collaborating. And the challenges of these different technology platforms working together for a brighter future.

Corporate and higher education May webinar.pptx

Corporate and higher education May webinar.pptx

Corporate and higher education May webinar.pptx

Rustici Software

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

sudhanshuwaghmare1

Data Cloud, More than a CDP by Matt Robison

Data Cloud, More than a CDP by Matt Robison

Data Cloud, More than a CDP by Matt Robison

Anna Loughnan Colquhoun

DBX First Quarter 2024 Investor Presentation

DBX First Quarter 2024 Investor Presentation

DBX First Quarter 2024 Investor Presentation

Automating Google Workspace (GWS) & more with Apps Script

Automating Google Workspace (GWS) & more with Apps Script

Automating Google Workspace (GWS) & more with Apps Script

Scaling API-first – The story of a global engineering organization Ian Reasor, Senior Computer Scientist - Adobe Radu Cotescu, Senior Computer Scientist - Adobe Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

Created by Mozilla Research in 2012 and now part of Linux Foundation Europe, the Servo project is an experimental rendering engine written in Rust. It combines memory safety and concurrency to create an independent, modular, and embeddable rendering engine that adheres to web standards. Stewardship of Servo moved from Mozilla Research to the Linux Foundation in 2020, where its mission remains unchanged. After some slow years, in 2023 there has been renewed activity on the project, with a roadmap now focused on improving the engine’s CSS 2 conformance, exploring Android support, and making Servo a practical embeddable rendering engine. In this presentation, Rakhi Sharma reviews the status of the project, our recent developments in 2023, our collaboration with Tauri to make Servo an easy-to-use embeddable rendering engine, and our plans for the future to make Servo an alternative web rendering engine for the embedded devices industry. (c) Embedded Open Source Summit 2024 April 16-18, 2024 Seattle, Washington (US) https://events.linuxfoundation.org/embedded-open-source-summit/ https://ossna2024.sched.com/event/1aBNF/a-year-of-servo-reboot-where-are-we-now-rakhi-sharma-igalia

A Year of the Servo Reboot: Where Are We Now?

A Year of the Servo Reboot: Where Are We Now?

A Year of the Servo Reboot: Where Are We Now?

Último (20)

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

MINDCTI Revenue Release Quarter One 2024

MINDCTI Revenue Release Quarter One 2024

MINDCTI Revenue Release Quarter One 2024

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Powerful Google developer tools for immediate impact! (2023-24 C)

Powerful Google developer tools for immediate impact! (2023-24 C)

Powerful Google developer tools for immediate impact! (2023-24 C)

presentation ICT roal in 21st century education

presentation ICT roal in 21st century education

presentation ICT roal in 21st century education

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

FWD Group - Insurer Innovation Award 2024

FWD Group - Insurer Innovation Award 2024

FWD Group - Insurer Innovation Award 2024

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

ICT role in 21st century education and its challenges

ICT role in 21st century education and its challenges

ICT role in 21st century education and its challenges

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

Corporate and higher education May webinar.pptx

Corporate and higher education May webinar.pptx

Corporate and higher education May webinar.pptx

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

Boost Fertility New Invention Ups Success Rates.pdf

Data Cloud, More than a CDP by Matt Robison

Data Cloud, More than a CDP by Matt Robison

Data Cloud, More than a CDP by Matt Robison

DBX First Quarter 2024 Investor Presentation

DBX First Quarter 2024 Investor Presentation

DBX First Quarter 2024 Investor Presentation

Automating Google Workspace (GWS) & more with Apps Script

Automating Google Workspace (GWS) & more with Apps Script

Automating Google Workspace (GWS) & more with Apps Script

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

A Year of the Servo Reboot: Where Are We Now?

A Year of the Servo Reboot: Where Are We Now?

A Year of the Servo Reboot: Where Are We Now?

PHP from the point of view of a webhoster

1. point of view of a webhoster speaking @webilea

2.

3. Developer and #devops

4. Study computer science at Uni Basel

6. mod_rewrite guru

7. NBA Jam addicted

8.

9. Why so famous ?

10. PHP on a server

12. Worries and concerns

13. Summary / Q&A

14.

15.

16. PHP5 2004 -> OOP, PDO, JSON, performance

17.

18. Stream, Session, DB access, image processing, ...

19. „Arrays in PHP are the sets and maps of java“

20. Why so famous? Approx. 30% in scripting languages http://phpadvent.org/2010/usage-statistics-by-ilia-alshanetsky

21.

22. Lamp stack (Linux – Apache – Mysql – PHP)

23. Steep learning curve (gains diversity)

25. Libraries and ready to use apps

26. PHP on a server Mod_php FastCGI CGI Web Apache Module gateway binary Process Apache process php-cgi php-cgi Configuration Apache conf files wrapper php.ini User Apache user Shell user or suexec user suphp

27.

28. Multiple PHP versions

29. Self compiled PHP version (make install)

30. Control over php.ini

31. PEAR and PECL installed

32.

33.

34. Cross-site scripting (XSS)

35. <?php $d = 2.2250738585072011e-308; ?>

36. Plugin code quality (Wordpress, Joomla, ...)

37. FTP with plain authentication

38.

39. Disabling Functionality

40. Preventing information disclosure (display_errors)

41. Restricting Includes

42. Restrict File Uploads

43. Mod_security (false positive)

44. Check file permission

45.

46. App monster like typo3 or magento

47.

48.

49.

50.

51. App monster like typo3 or magento

52. mod_rewrite voodoo

53. PHP5.3 -> lot of deprecated functions

54. Developers want * bling bling*

55. My website is hacked – what now?

56.

57. No clearing of cached files

58. Updates - „never touch a running system“

59. Store files in database

60. Corrupted databases

61.

62. PHP is highly ﬂexible & conﬁgurable

63. Actracts wide range of users

64. Lots of abuse cases are PHP related, but that’s not the fault of PHP

65. Scaling is „limited“ (left out due time limit)

Notas do Editor

Meine eigene Auffassung, nicht unbedingt korrekt.
Community -> Niveau ist eher im unteren Bereich, Einsteiger helfen Einsteiger. Umgangston nicht immer toll.
Selber kompilieren, weil Distros langsam sind mit PHP release. cyon ist ein Sharedhoster Erwartungen der Kunden
Autoupdates helpes a lot (wordpress)