Re: Quick Code Audit
| From: | lists at itsg dot net dot au | Date: | Tue, 05 Sep 2000 11:29:05 +0000 |
| Subject: | Re: Quick Code Audit | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-32117@lists.php.net to get a copy of this message | ||
On Tue, 5 Sep 2000, Stanislav Malyshev wrote:
> Well, the idea that code should be audited is definitely good
> idea. However, this couldn't be "quick" - this is slow and sometimes
> painful process.
sorry, i should have been more clear about the "quick" part. i was not
implying the process would be a quick one, merely that if anyone was aware
of particular issues then they should be brought to light and taken care
of as quickly as is humanly possible. the job of going through all the
code is a huge one, and i am well aware it will take a long time,
regardless of who does it 8^)
> On the other side, if someone would take on himself to be "security
> watchdog" of PHP and gather and maintain list of known PHP security issues
> - that would be very good.
yes, i agree it would be excellent if there was someone willing to fill
this role.
- avi