someothherguyy

i don't think LoC is the metric. sometimes fewer lines of code results in a larger attack surface through type coercion / widening, poor abstractions, hiding or stuffing behavior (modules that do everything), etc. to me, making code easy to understand, test, fuzz, and verify is more important. sometimes that requires more lines of code.

in a utopian future, addictions like that would be cured and siloed. hopefully, those with motivation to understand the mechanisms of human suffering would be in charge of policy.

it doesn't sound like you understand what you are doing?

in theory.

many common nginx setups and hardening suggestions would make it very difficult to exploit. as well as any sort of distributed architecture that doesn't pin requests to clients.

there could be other undiscovered paths to exploit this vulnerability though. the PoC here uses the disclosed path for exploiting on patch day, minus mod_php.

there are a number of php docker images. some are insecure by default.

many php setups sit behind nginx, caddy, or other webserver with a max body size limit.

anyone following OWASP / similar guidelines was probably okay here (for this particular PoC path), if not using apache/mod_php, i would think.

for people who still code. why do you need them not to?

United States, Canada, United Kingdom, Australia and Ireland

i understand the correlation of SUDs and ADHD. ADHD is also correlated with the population of adults in prison. it doesn't mean if your mother had ADHD you will end up in jail.