Dutch National Cyber Security Center is Offline because it uses PHP

Re:Dutch National Cyber Security Center is Offline because i... by louwrentius on Wednesday October 21, 2026 @09:11AM (#50180358)

It's easy to harp on PHP but I wonder if we're going to get this kind of vulnerabilities in languages like Python or Go soon too.

[ Parent | on HN ]

Re:Dutch National Cyber Security Center is Offline because i... by Avamander on Wednesday October 21, 2026 @09:31AM (#50180664)

PHP is worse in this aspect with its long tail of legacy and staying close to C. It's absolutely possible that memory-unsafe Python interpreters could have something vaguely similar, but it's much less likely. Plus there are Python interpreters in memory-safe languages.

In any case, memory-unsafe codebases will continue to be a significant danger. Be it in interpreters or anywhere else. Just like they have been for the past 20+ years.

[ Parent | on HN ]

Re:Dutch National Cyber Security Center is Offline because i... by jonwinstanley on Wednesday October 21, 2026 @09:36AM (#50180748)

The way things are going, I imagine there are going to be vulnerabilities found in everything

[ Parent | on HN ]

Re:Dutch National Cyber Security Center is Offline because i... by phplovesong on Wednesday October 21, 2026 @09:25AM (#50180557)

Probably not. PHP is so badly built these kinds of things happen frequently.

[ Parent | on HN ]

Re:Dutch National Cyber Security Center is Offline because i... by lp92 on Wednesday October 21, 2026 @04:27PM (#50187143)

A lot of PHPs issues stem from bad legacy decisions.

[ Parent | on HN ]