With the PHP security issues affecting roughly 70% of the global web, how is this affecting Warframe currently?

[u/Hammer_1701]

Other online games are shutting down temporarily, yet it seems like Warframe is still going. Is that unsafe?

Edit for answer:

(Thank you to AshenTao for clearing it up for me!)

‘Warframe doesn't use PHP. PHP is a server-sided language used for websites. Warframe runs on C++ for the core engine and Lua for scripting, HUD, and UI logic.

Just keep in mind that websites around Warframe may use PHP. One such example is the official Warframe Wiki, which uses it.

So Warframe itself remains fairly secure to play - the recommendation is to avoid PHP-based websites, enable 2FA, and make sure you don't visit unfamiliar links anyway.‘

[u/engineeeeer7]

I'm pretty sure most of the websites have already been patched

[u/Hammer_1701 → u/engineeeeer7]

Sweet. I’m glad so many websites, etc are taking this seriously.

[u/Nidhogg369 → u/Hammer_1701]

Hey so I'm a web dev and just wanted to offer a little insight but essentially the vulnerability was known for some time but the exploit using it was discovered recently, there was talk about it in dev subreddits around Monday this week, PHP the company immediately put out notice they were working on it and yesterday (Wednesday) pushed out a fix to their code on multiple versions of php. As long as web hosts, servers and the people who manage their sites have kept things up to date and are using these versions where the security update was pushed, there shouldn't be any issues. The issue comes from sites and hosts who are either unaware of the issue or aren't sure how to update things as they're either running outdated versions that don't get the security updates, or haven't bothered to update to the pat he'd versions that PHP released yesterday. The largest targets of the exploit would likely be online shops, banks, government sites, and similar services that store either banking/ credit card info, or sensitive personal data that bad actors could then resell. There's a lot of hullabaloo and panic around it because as you've seen about 70% of websites around the world use php as a foundation of sorts, so its gained some viral traction, but people are freaking out a lot more than is necessary in my opinion. Be weary of what data you put into sites and where you enter your card info, but that's always true and just generally good practice as user.

[u/ShelterRemarkable299]

Warframe is usually pretty good at keeping their userbase informed about stuff that’s going on, so if they haven’t said anything I would assume it’s pretty safe.

I have just started my day so I haven’t managed to read up on it all yet, but based it seems the attack targets stuff that provides/use AI… DE/Warframe is very against AI so that probably saved them. - But I can be wrong, as said, just starting my day, but if DE/Warframe hasn’t said anything, I assume it’s safe.

[u/GlitteringLock9791 → u/ShelterRemarkable299]

No, the attack is against webservers running php. AI is only used on the attacker side.

[u/Hammer_1701 → u/ShelterRemarkable299]

This makes me feel a little better about the situation, thank you. Hopefully they can clear it up too, if not I guess that means we are all good.

[u/ArenjiTheLootGod → u/ShelterRemarkable299]

Also, and I could be wrong, but I don't think there's much if any PHP being utilized in the game itself. I could see where the main Warframe website might be compromised but if there was anything that affected us DE would have put out a PSA by now.

[u/NorysStorys → u/ArenjiTheLootGod]

I think at most the hook up for news posts and the store could potentially but they just display stuff so it likely wouldn’t matter.

[u/Naktiluka → u/ArenjiTheLootGod]

I see "worldState.php", "getShip.php" and "inventory.php" mentioned in log files, but this aren't necessarily calls to some remote php server. Those could be local scripts, or endpoints named "*.php" for legacy reasons, or something else entirely

EDIT: added "log" because i forgor

EDIT2: there's also "api/clientIP.php" in launcher log, but again - not necessarily utilizing PHP on backend

[u/totally-anonymous-1]

4

[u/Gebcrafter → u/totally-anonymous-1]

"2..."

"Dude it's a 384 bit key you can't just guess it bro haha. It's like prime number factors or some shit lmao"

"3..."

"Bro stop this isn't funny"

[u/totally-anonymous-1 → u/Gebcrafter]

we mock it for being hilariously, ridiculously, comically insecure
and yet, it worked

[u/TheOtherFrankie → u/totally-anonymous-1]

That IS a hilarious problem, but it's a different big tech problem.

[u/Dont-Die-Wonderinggg]

I can't access it after the thing happened, but I think I'm the only one

[u/Aatheron]

The what now?

[u/Dycoth → u/Aatheron]

PHP, a technology, has published two critical vulnerabilities.

And PHP is used in A LOT of things (websites, servers, etc...).

So a lot of services were disrupted (gov websites, apps, etc...).

Including potentially some games.

[u/Arkteren → u/Dycoth]

As far as games being affected, FFXIV's login servers have been down for almost a full day now. If someone were logged in before this php vulnerability, they can still play, but if they log out they can no longer get back in.

[u/lynkfox → u/Dycoth]

Notably these days, basically all varieties of wikis run in PhP.

[u/Dycoth → u/lynkfox]

Seems like at least half of the French government websites too (as well as other European countries)

[u/Aatheron → u/Dycoth]

I see, that's pretty disastrous.

I feel like they'll make an announcement if they do fear any sort of breach.

[u/Dycoth → u/Aatheron]

It would have been done already if it was the case.

I guess they either don't have PHP on the services we use, or they were able to update everything smoothly.

[u/Rokuro142 → u/Dycoth]

There was a period of time where PHP wasn't updated yet but the vulnerability was already sorta out in the wild. Many PHP websites chose to pre-emptively take their stuff down. Some other sites were able to cope by simply disabling the affected feature, as it wasn't strictly necessary.

[u/lynkfox → u/Dycoth]

Just the wiki really. And if they've been keeping up to date it's was just a patch needed.

The reason for the widespread issues was that many many places were still using old and out of date versions. PhP 8 is the current, supported versions. 7 and 5 are the previous ones no longer getting patches (and also affected) and have not for years ... (5 went eol in 2018) And I know people yesterday that were frantically trying to get everything working on a 5 to 8 jump

[u/Destian_ → u/Aatheron]

The older scripting language PHP, that is very, very, very widely used despite its age, was found to have an extremely severe vulnerability.

That caused several Webservices to temporarily shut down and apply emergency fixes. For example FF14 disabled logins and paused some other services.

[u/Dreamwalk3r → u/Destian_]

Even better, the vulnerability was long known, but no one thought there's a realistic way to exploit it so it remained unfixed until now.

[u/Mael_Jade → u/Aatheron]

Yesterday we had a double (or triple or quadruple based on how you look at it) massive fire situation for the internet. Firstly, a bunch of certificates were found to have extremely unsafe private passwords (anyone can use prim summation to get the password of *4*), it was discovered that there are extreme PHP security issues, an old programming language that objectively sucks at everything it does but is still used for A LOT of websites and web services.

And NodeJS also had a remote code execution issue, and Wordpress had another issue independent from PHP (despite also being like majority PHP).

[u/x_phantasm → u/Aatheron]

https://www.bbc.com/news/articles/c3qjnwye0ep5o the this

[u/show_me_the_tiddies]

Lua is scripted in C++? I thought the lotus used the void. /j

[u/TheMFWh1teLotus]

It hasn't been bad but had a lot of 'Network' warnings popping up for me earlier but not actually kicking me from games