News for hackers. Stuff that matters.
Re:Our Ambitious Plan to Make Insecure PHP Software a Thing ... by fernly on Tuesday January 16, 2018 @11:38PM (#16165507)
> we can raze the mountains of collective technical debt that have accumulated over the past decade.

Not likely when professionally written code is full of errors, many security-related (e.g. attempting to load and execute .gifs). I recently presented a compilation[1] of the errors produced by one widely-used commercial ad function. If this is how a professionals write commercial code, I don't want to imagine what amateurs have been doing.

[1] https://www.reddit.com/r/web_programming/comments/7o8dzf/cop...

Re:Our Ambitious Plan to Make Insecure PHP Software a Thing ... by avenius on Wednesday January 17, 2018 @03:34AM (#16166395)
Sounds like an intentionally malicious function to me - just waiting for a proper payload.