Why “Multipart” is being discussed
The most recent Hacker News stories and comments contributing to this topic's mentions.
It's bulletproof, in the same way that my open window is bulletproof because a bullet will fly right through it and not damage the glass. Additionally, the author isn't engaging…
by mirashii · Oct 22, 2026
Yeah — I have log entries I believe show LLM-bot-driven exploit attempts — POSTs to a variety of non-application URLs, blocked on the front end proxy by rules I added that preve…
by dofm · Oct 22, 2026
Well, that's a "mitigation problem", it was part the official mitigation: set two flags on the php.ini and block multipart forms. You can see them in the ghsa. If that's what th…
by jopicornell · Oct 22, 2026
I won't, now, because I will catch shit for suggesting it, it seems. But since one of the main ways this vulnerability can be triggered (by causing out of memory) involves multi…
by dofm · Oct 21, 2026
The issue is where to direct the LLM's attention. Prompting the LLM to "look for vulnerabilities in PHP's multipart upload handling code" is going to find stuff that "look for v…
by rectang · Oct 21, 2026
I'd like to express my dissatisfaction that the "big guys" are basically getting free security over getting earlier disclosure. Just saying "hey blocking multipart uploads can m…
by InsidiousWombat · Oct 21, 2026
Interest
Proportion of Hacker News items mentioning "multipart" over time.
Mentions
Total number of Hacker News items mentioning "multipart" over time.
Multipart may refer to:a multipart message in the MIME internet format Multipart Solutions, a British parts and components supplier multipart download or download acceleration Read more on Wikipedia