Slack Is Buying HipChat from Atlassian

Re:Slack Is Buying HipChat from Atlassian by tabbott on Thursday July 26, 2018 @10:43PM (#17623085)

I agree it's theoretically possible to write a secure project in PHP, but it's very difficult, especially if you're hiring people like crazy.

If you divide the amount they've paid out in bounties by the number of bounties paid, and compare with their bounty tier rules, it's clear that a lot of the vulnerabilities that were reported in Slack are relatively severe.

(And I agree bug bounty programs are great; we also use HackerOne)

[ Parent | on HN ]

Re:Slack Is Buying HipChat from Atlassian by kennydude on Friday July 27, 2018 @04:00AM (#17624292)

If you use a framework like Laravel it probably covers most things.

You could easily write a massively insecure application in core python, but things like Zulip use Django which shields you from most of it.

[ Parent | on HN ]

Re:Slack Is Buying HipChat from Atlassian by omnimus on Friday July 27, 2018 @01:41AM (#17623707)

It is not about the language is it... I don't think there is so big difference between php and python. Besides Slack is most probably using whole lot more tech than php.

It is about Zullip being open source.

[ Parent | on HN ]

Re:Slack Is Buying HipChat from Atlassian by tabbott on Friday July 27, 2018 @02:33AM (#17623913)

It's also about the language. See, for example,

https://www.quora.com/Why-is-PHP-hated-by-so-many-developers

[ Parent | on HN ]

Re:Slack Is Buying HipChat from Atlassian by _bear on Monday July 30, 2018 @11:59AM (#17645411)

That is from 2014. There have been many changes in the programming language since.

Most people nowadays are using frameworks and abstraction layers which make most of these points moot.

[ Parent | on HN ]