RetroFed Forums
Your home away from modern life.
Search Categories Forum list Register Log in
About RetroFed
RetroFed

Welcome to the nostalgia-filled piefed instance of yesteryear.

Open Registration with Application questionnaire.

If you have a question or comment you can post in !meta@retrofed.com or message @DosDude@retrofed.com or @Die4Ever@retrofed.com

In case of downtime and/or emergency, we will post updates on @DosDude@mastodon.social

Some rules we try to uphold:

  • Be civil. Bigotry is not welcome. This includes (but is not limited to): transphobia, queerphobia, racism, ageism and ableism. We do not promote hate.
  • Communities need to be Retro or Retro-adjacent.
  • Please don't upload pornographic content. (use an external image host for that)
72 registered users
Administrators: DosDude, Die4Ever
Visit retrofed.com
Today's PHP Security Release, and How We're Strengthening PHP Security
Post Reply RetroFed Forums Forum Index » Programming
AuthorMessage
cantankerous_cashew
lemmy.world
cantankerous_cashew@lemmy.world
Joined: 2023-07-02
Posted:   Subject: Today's PHP Security Release, and How We're Strengthening PHP Security Quote

Link: https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
46   Original
spankysalmon
fedinsfw.app
spankysalmon@fedinsfw.app
Joined: 2026-02-28
#2 Posted:   Subject: Re: Today's PHP Security Release, and How We're Strengthening... Quote Reply

Delete PHP and it will be the most secure scripting language on the planet.
8
melfie
lemmy.zip
melfie@lemmy.zip
Joined: 2026-03-24
#3 Posted:   Subject: Re: Today's PHP Security Release, and How We're Strengthening... Quote Reply

It’s just for making a Personal Home Page, so not a big deal either way, right?
4
Enchanted
lemmy.world

enchanted@lemmy.world
Joined: 2026-07-29
#4 Posted:   Subject: Re: Today's PHP Security Release, and How We're Strengthening... Quote Reply

Wow, fuck Chainguard.
12
trevor (any/all)
lemmy.blahaj.zone
trevor@lemmy.blahaj.zone
Joined: 2023-06-10
#5 Posted:   Subject: Re: Today's PHP Security Release, and How We're Strengthening... Quote Reply

On October 21st at 07:41 UTC, more than six hours before the coordinated release, Chainguard unilaterally broke the embargo and published built images containing the fix. Like other distributors, Chainguard had received the patch in advance so its users could update the moment the vulnerabilities were disclosed. Any attacker could now study the fix in binary form while every other PHP user was still waiting for the release. This disregarded weeks of work by many parties toward a coordinated disclosure.

No honor amongst profiteers.

We need to rebuild tech infrastructure in a way that doesn't count on the benevolence of guys that will sell the entire world out for a quick buck.
10
FizzyOrange
programming.dev
FizzyOrange@programming.dev
Joined: 2023-09-24
#6 Posted:   Subject: Re: Today's PHP Security Release, and How We're Strengthening... Quote Reply

There wasn't much reason to use PHP before, and there's none now. Even existing PHP projects can easily be ported to a faster and more secure language.
0
Post Reply Page 1
Powered by RetroFed · PieBB frontend · All times are Europe/Amsterdam