ProHosting is NOT Pro-REBOL
[1/9] from: giovanni:cardona at: 13-Dec-2000 17:44
Just to let you know about this site.
This site was mentioned several days ago, that offer free hosting with REBOL
support, but its not true. (as least that what techsupp says)
----- Original Message -----
From: "Free Service" <[support--free--prohosting--com]>
To: "Giovanni Cardona" <[giovanni--cardona--com]>
Sent: Wednesday, December 13, 2000 2:06 PM
Subject: RE: {ProHosting#129-941} Welcome to ProHosting!
Sorry, we don't support REBOL on our servers.
Tesa
Free ProHosting Tech Support Staff
free.prohosting.com
[support--free--prohosting--com]
[2/9] from: ingo:2b1 at: 13-Dec-2000 22:06
Hi Giovanni,
I got an account at prohosting some time ago, uploaded rebol
into my cgi-bin, and voila, it Rebols.
I've not done anything interesting since then, but three weeks
ago it still worked ...
kind regards,
Ingo
Once upon a time Giovanni Cadona from Presario spoketh thus:
> Just to let you know about this site.
> This site was mentioned several days ago, that offer free hosting with REBOL
<<quoted lines omitted: 13>>
> [rebol-request--rebol--com] with "unsubscribe" in the
> subject, without the quotes.
--
do http://www.2b1.de/
_ . _
ingo@)|_ /| _| _ <We ARE all ONE www._|_o _ _ ._ _
www./_|_) |o(_|(/_ We ARE all FREE> ingo@| |(_|o(_)| (_|
._| ._|
[3/9] from: carlos:lorenz at: 16-Dec-2000 14:46
Could you be more specific at that point you uploaded REBOl at you cgi-bin?
You mean you just uploaded you scripts written in REBOL and all them worked
pretty well? No further configuration necessary?
Thanks
--Lorenz
[4/9] from: giovanni:cardona at: 16-Dec-2000 13:03
I tried that without success, it will be cool if
Mr. Ingo explain it ;)
[5/9] from: kracik:mbox:dkm:cz at: 16-Dec-2000 20:41
Hi,
I tried to describe the process at
http://hammer.prohosting.com/~rebol/rebol-cgi-prohosting.html
Unfortunately it's incomplete and also inaccurate, REBOL executable
should not be in cgi-bin for security reasons, only scripts should be
there.
hope this helps,
--
Michal Kracik
Lorenz wrote:
[6/9] from: gchiu:compkarori at: 19-Dec-2000 17:04
On Sat, 16 Dec 2000 20:41:42 +0100
Michal Kracik <[kracik--mbox--dkm--cz]> wrote:
> Unfortunately it's incomplete and also inaccurate, REBOL
> executable
> should not be in cgi-bin for security reasons, only
> scripts should be
> there.
Hi,
What's the exact exploit here if Rebol is in cgi-bin?
--
Graham Chiu
[7/9] from: kracik:mbox:dkm:cz at: 19-Dec-2000 14:12
Hi,
I don't know of any exploit, it's just a general rule not to put
interpreters that accept scripts from command line or stdin to cgi-bin.
See this advisory for details:
http://www.stanford.edu/group/itss-ccs/security/Advisories/96-252.html
--
Michal Kracik
Graham Chiu wrote:
[8/9] from: gchiu:compkarori at: 20-Dec-2000 6:52
Hi,
> I don't know of any exploit, it's just a general rule not
> to put
> interpreters that accept scripts from command line or
> stdin to cgi-bin.
>
I see. I suppose someone could just call Rebol itself using
their web browser, and that would leave an instance of Rebol
running that could not be shut down.
Can RT suggest a solution to this?
--
Graham Chiu
[9/9] from: rebol:techscribe at: 15-Jan-2001 11:17
Hi,
since you get a CGI bin I imagine you could simply ftp REBOL into your
account and use it. I don't know if that is in comflict with their
policies.
Take Care,
Elan
Notes
- Quoted lines have been omitted from some messages.
View the message alone to see the lines that have been omitted