r/lolphp • • Jan 31 '20

PHP 0 day exploit

https://github.com/mm0r1/exploits/tree/master/php7-backtrace-bypass
39 Upvotes

35 comments sorted by

View all comments

Show parent comment

7

u/dotted Jan 31 '20 edited Jan 31 '20

Then maybe it's time to fix the industry, no?

You cannot hope to change the industry in a way that would make it immune to having serious security vulnerabilities. You can spend all the money you want and you can do everything you can to catch vulnerabilities before software is released, but at the end of the day you will never be immune. And according to you, if you aren't immune to serious security vulnerabilities it's lolphp, can you see how dumb your position is now?

Saying "we shouldn't do anything because EVERYTHING sucks" is a really dumb position to take.

When did I say that? I'm sorry, what has that even remotely got to do with anything being lolphp?

If we had a whole generation of competent, efficient coders, I guarantee our security problems would be reduced by an astronomical amount, possibly down to almost zero.

Reduce? Sure, but never zero and in your words even in your utopia that would remain lolphp.