News for hackers. Stuff that matters.

A comment on Laravel cookie forgery, decryption, and RCE.

Re:Laravel cookie forgery, decryption, and RCE by tptacek on Sunday April 20, 2014 @04:26PM (#7618354)
This is going to sound like empty language-war rhetoric, but: PHP might be the worst mainstream language in which to implement crypto. A crappy type system is one thing, but an unpredictable type system is much worse.
[ Parent | on HN ]
Re:Laravel cookie forgery, decryption, and RCE by eksith on Sunday April 20, 2014 @04:35PM (#7618384)
The enemy of any crypto is naïve assumption. That's not unique to PHP, but I agree, the type system can make it worse.
[ Parent | on HN ]