Re: Suhosin patch disabled by default in Debian php5 builds
| From: | Nikita Popov | Date: | Mon, 06 Feb 2012 16:51:13 +0000 |
| Subject: | Re: Suhosin patch disabled by default in Debian php5 builds | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57773@lists.php.net to get a copy of this message | ||
On Mon, Feb 6, 2012 at 5:22 PM, Reindl Harald <h.reindl@thelounge.net> wrote:
> if you anwer to a list mail answer to the list and not private damend!
Please, such kind of language is really not necessary. Hitting Reply
instead of Reply All happens to everybody once in a while.
> would it have been better to make a full disclosure before
> having a fix to help attackers? if this is your opinion
> you are a foolsih idiot, sorry but no other words for that
Full disclosure sure is controversial, but I don't think it is
regarded as necessarily bad. Just look at the way Stefan disclosed the
PHP 5.3.9 remote code execution vulnerability: Full disclosure.
So please, again, don't call people names.