Re: dangerous handling of security bugs

On 7/12/10 6:35 AM, Reindl Harald wrote: > Am 12.07.2010 15:29, schrieb Rasmus Lerdorf: >> Even for small sites, you can get your own VM from Rackspace >> Cloud for about $10/month or from linode or any number of providers >> where you are not sharing your PHP environment with anyone. >> >> -Rasmus > > This is no argument because the most envirnonments are shared because > you can not install 400 virtual machines for 400 small domains, > somebody have to update them all.... > > 90% of all php-driven websites are apache virtual-hosts > > The price for a v-server is also no argument because you can > not recommend that every NOOB buys a virtual server because > this is really really dangerous if he has no skills for > holding it up to date and secure Right, so the ISP that offers this low-end hosting has to keep up to speed with their distros' security patches. We work with the distros and CVEs are issued for security problems. They are the ones providing what people like that install anyway, not us. -Rasmus