Mailing List Archive: 49091 messages
  • Home
  • Script library
  • AltME Archive
  • Mailing list
  • Articles Index
  • Site search
 

ProHosting is NOT Pro-REBOL

 [1/9] from: giovanni:cardona at: 13-Dec-2000 17:44


Just to let you know about this site. This site was mentioned several days ago, that offer free hosting with REBOL support, but its not true. (as least that what techsupp says) ----- Original Message ----- From: "Free Service" <[support--free--prohosting--com]> To: "Giovanni Cardona" <[giovanni--cardona--com]> Sent: Wednesday, December 13, 2000 2:06 PM Subject: RE: {ProHosting#129-941} Welcome to ProHosting! Sorry, we don't support REBOL on our servers. Tesa Free ProHosting Tech Support Staff free.prohosting.com [support--free--prohosting--com]

 [2/9] from: ingo:2b1 at: 13-Dec-2000 22:06


Hi Giovanni, I got an account at prohosting some time ago, uploaded rebol into my cgi-bin, and voila, it Rebols. I've not done anything interesting since then, but three weeks ago it still worked ... kind regards, Ingo Once upon a time Giovanni Cadona from Presario spoketh thus:
> Just to let you know about this site. > This site was mentioned several days ago, that offer free hosting with REBOL
<<quoted lines omitted: 13>>
> [rebol-request--rebol--com] with "unsubscribe" in the > subject, without the quotes.
-- do http://www.2b1.de/ _ . _ ingo@)|_ /| _| _ <We ARE all ONE www._|_o _ _ ._ _ www./_|_) |o(_|(/_ We ARE all FREE> ingo@| |(_|o(_)| (_| ._| ._|

 [3/9] from: carlos:lorenz at: 16-Dec-2000 14:46


Could you be more specific at that point you uploaded REBOl at you cgi-bin? You mean you just uploaded you scripts written in REBOL and all them worked pretty well? No further configuration necessary? Thanks --Lorenz

 [4/9] from: giovanni:cardona at: 16-Dec-2000 13:03


I tried that without success, it will be cool if Mr. Ingo explain it ;)

 [5/9] from: kracik:mbox:dkm:cz at: 16-Dec-2000 20:41


Hi, I tried to describe the process at http://hammer.prohosting.com/~rebol/rebol-cgi-prohosting.html Unfortunately it's incomplete and also inaccurate, REBOL executable should not be in cgi-bin for security reasons, only scripts should be there. hope this helps, -- Michal Kracik Lorenz wrote:

 [6/9] from: gchiu:compkarori at: 19-Dec-2000 17:04


On Sat, 16 Dec 2000 20:41:42 +0100 Michal Kracik <[kracik--mbox--dkm--cz]> wrote:
> Unfortunately it's incomplete and also inaccurate, REBOL > executable > should not be in cgi-bin for security reasons, only > scripts should be > there.
Hi, What's the exact exploit here if Rebol is in cgi-bin? -- Graham Chiu

 [7/9] from: kracik:mbox:dkm:cz at: 19-Dec-2000 14:12


Hi, I don't know of any exploit, it's just a general rule not to put interpreters that accept scripts from command line or stdin to cgi-bin. See this advisory for details: http://www.stanford.edu/group/itss-ccs/security/Advisories/96-252.html -- Michal Kracik Graham Chiu wrote:

 [8/9] from: gchiu:compkarori at: 20-Dec-2000 6:52


Hi,
> I don't know of any exploit, it's just a general rule not > to put > interpreters that accept scripts from command line or > stdin to cgi-bin. >
I see. I suppose someone could just call Rebol itself using their web browser, and that would leave an instance of Rebol running that could not be shut down. Can RT suggest a solution to this? -- Graham Chiu

 [9/9] from: rebol:techscribe at: 15-Jan-2001 11:17


Hi, since you get a CGI bin I imagine you could simply ftp REBOL into your account and use it. I don't know if that is in comflict with their policies. Take Care, Elan

Notes
  • Quoted lines have been omitted from some messages.
    View the message alone to see the lines that have been omitted