Actually yeah you're right. I reread the post and their point was it wasn't easily exploitable, not that it wasn't exploitable. Which makes sense when LiveOverflow wasn't able to bypass ASLR.

None of the POCs work and it's not an issue in a fresh install.

Because as we all know, other computer languages never have had any vulnerabilities, ever

I haven't heard of Rockstar having one. Go become a certified rockstar dev and confuse recruits.

People get irrationally angry when PHP has a fault. Must be because we're too busy holding up 70% of the web to fall for drama.

In all seriousness these exploits are bad. Update right away.

Every language has bugs, every program has bugs.

Not like php, no.

To be fair, it's quite a biggie.

I remember a day when we had 4 major ssh Vulnerabilities in the same day. We were on advance notice because #OSVendor so we got them as they came in and went nuts.

And each one that came in spawned another new effort of research, patch, test, roll, systest, releng, ship. It was all day, all-hands, every group, panic.

Wait. Now I can't decide whether it was 2002 or 2003, because there were 2 days where that fucking happened.

With openssh.

Keep your pants on, right?

Tommy used to work on the docs

It's very fast to load in the browser and lightweight in the backend too, without sacrificing much functionality except for some fancy animations.

Personally I just hate the language syntax though 😅

No TV And No Beer Make Homer Go Crazy

Most of the main issue here where standard SQL practices were hugely insecure went by the wayside over a decade ago and the other issues are common to all internet work. PHP got to carry that heritage though.

But like, I’ve seen early work from a guy now making huge bucks with nvidia on their streaming side where I hacked it within minutes because he just didn’t know that you can’t do security with front end JavaScript.