Re: Suhosin patch disabled by default in Debian php5 builds

Hello Stas, > That's your opinion and you completely entitled to it and I have absolutely no issue about > it. As I have no issue with your preferring to keep Suhosin as a separate project - it's your > code, you decide what to do with it. What I have an issue with is understanding how, after all > public invitations and discussion, you claim that we refuse to cooperate and "fight you like > cancer". The problem is when people like Pierre run around and tell in public that people have only more problems due to Suhosin, that he is happy that distributions kick it. He also tells everybody that he sees no need in any of the Suhosin features and is VERY VOCAL about it. Nevertheless PHP 5.3.9 introduced a vulnerability because PHP.net cloned one of those "we see no need for any features" features. Also Pierre runs around every time I mention that Suhosin is not bitten by a bug and accuses me of blatant advertisement or he just downplays the fact that Suhosin users were relatively save from the critical major vulnerability in PHP 5.3.9. He is actively lobbying against Suhosin and spreading FUD. That is pretty much like fighting it like cancer. > Nobody demands anything from you. However, for a feature to be included in PHP it needs to go > through certain process. It's not because we hate you and this process is not personal for you, Please read the email form Pierre: I see no sense in other features of Suhosin. Write some RFC to convince us to include them. And BTW you cannot play the: It is Pierre you know him card. The PHP developers are free to step up and say publicly that Pierre's view is not that of the developers. But you choose to not to do so. So you are behind him. Regards, Stefan