Jan Reilink

Jan Reilink

In my day to day work, I’m a systems administrator – DevOps / SRE and applications manager at Embrace – The Human Cloud. At Embrace we develop, maintain and host social intranets for our clients. Provide digital services and make working more efficient within various sectors.

“How we broke PHP, hacked Pornhub and earned $20,000”

Pornhub bug bounty - (c) cc-by-nc-sa | Portal Gda

It all started by auditing Pornhub, then PHP and ended in breaking both… We have gained remote code execution on pornhub.com and have earned a $20,000 bug bounty on Hackerone. We have found two use-after-free vulnerabilities in PHP’s garbage collection algorithm. Those vulnerabilities were remotely exploitable over PHP’s unserialize function.

MySQL InnoDB performance improvement: InnoDB buffer pool instances – Updated!

High Performance MySQL

Are you running into MySQL load problems? InnoDB Buffer Pool optimization is an important step in tuning MySQL servers for a heavy InnoDB workload. Configuring innodb_buffer_pool_instances and increase read/write I/O threads. Dividing the InnoDB buffer pool into multiple instances can improve Disk I/O. And by doing so, you run your database & server more efficiently and faster. Here is a little help for you.

Generate pseudorandom passwords with OpenSSL

Keys

OpenSSL comes in handy when you need to generate random passwords, for example for system accounts and services. In this short post I'll give you a quick example on how to generate random passwords with OpenSSL in Linux (Bash), Windows and PHP.