Re: Re: Have you seen the "PHP audit project"?
| From: | Stefan Esser | Date: | Mon, 11 Mar 2002 09:27:25 +0000 |
| Subject: | Re: Re: Have you seen the "PHP audit project"? | ||
| References: | 1 2 3 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-81006@lists.php.net to get a copy of this message | ||
Hi,
A PHP auditing project is a good idea, cause there are still lots of bugs,
BUT
such a project should never ever be led by people from the OpenBSD world.
It would be much better if we create our own auditing team. This would
ensure
that we have control over the bugs that are found and we will never get such
arrogant messages like: "This bug was fixed in PHP hardening patch about
a year ago". Exactly this happened with the SSH deattack hole.
Stefan Esser