2026-10-23 07:42 UTC
A bit of follow-up on the PHP exploit-global emergency website update that's been in the news recently, and how bad it was: turns out most of the fix' deployment that saved the internet rested on a single, free-software volunteer.
https://www.theatlantic.com/technology/2026/10/man-who-saved-internet-php-vulnerability/689123/?gift=nwn-guseqS6cY1kVeEKZAV4eM30ZQanhnWOnf22yy-c
The XKCD law of Free Software remains undefeated:
Replies (3)
-
@kiwix@mastodon.social 2026-10-23 07:47
"From where I stand, it was not stressful, because I’m doing this as a volunteer, and if I get hit by a bus, then it will be someone else’s problem." A quote to ponder 🤔
-
@Fonant@social.vivaldi.net 2026-10-23 08:29
@kiwix@mastodon.social That story might not be correct: https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
-
@blasdo@hostux.social 2026-10-23 08:45
@kiwix@mastodon.social and in the future will be cinema since this guy will be a vibecoder that is spending money until is exahusted and don't want to pay more, and the project is EOL and lo one knows how it works. LLMs are not improving security, are making it much worse.