4 ms·

Obligatory "that article is from 10 years ago and it's really not the same PHP anymore"

• quchen 4y ago
  OP’s link disagrees. A critical vulnerability being called »not a bug RTFM« is the same cultural and engineering level of »string length as hash function what’s the problem«.
  • bawolff 4y ago
    This bug is obviously not critical.
  • aeyes 4y ago
    The response is wrong though. The RFC for this function which someone quoted further down in the bug report clearly stated that it should return false even if you feed it a garbage hash.
  • stef25 4y ago
    The initial response to the report is obviously quite shocking, not disagreeing there.
  • deleted 4y ago
    [deleted]