i would not be surprised if their back end is still a bunch of old skool perl scripts in the cgi folder that were l33t coded back in the day, but nobody now can even start to parse the perl itself.
switching from impossible to read perl scripts to flavor-of-the-day language would be a use case i can actually get behind and support for replacing.
Well cpanel is written in perl, and certainly hard to read but overall I would say cpanel is probably one of the more secure control panels. This hacking, sounds like the systems were root compromised and unlikely to be related to cpanel. I would guess it is more likely credential compromise, perhaps phishing related on staff themselves.
Comments
i would not be surprised if their back end is still a bunch of old skool perl scripts in the cgi folder that were l33t coded back in the day, but nobody now can even start to parse the perl itself.
switching from impossible to read perl scripts to flavor-of-the-day language would be a use case i can actually get behind and support for replacing.
Well cpanel is written in perl, and certainly hard to read but overall I would say cpanel is probably one of the more secure control panels. This hacking, sounds like the systems were root compromised and unlikely to be related to cpanel. I would guess it is more likely credential compromise, perhaps phishing related on staff themselves.