4 ms·
> Suggestion to make those parts read-only was rejected as a 0.6% performance impact was deemed too expensive for too little gain. Big Oof. :( :( :(
by justinclift 2y ago
> Suggestion to make those parts read-only was rejected as a 0.6% performance impact was deemed too expensive for too little gain.
Big Oof. :( :( :(
- ipaddr 2y agoI'm okay with the tradeoff. PHP prioritizing speed over uncommon security is the right call here.
- dev_hugepages 2y agomissing /j
- bigtimesink 2y agoAt a large PHP shop, 0.6% can be tens of millions of dollars.
- kortilla 2y agoOver what time period? You’re implying they are spending at least a billion dollars on hardware costs for 0.6% to be tens of millions.
- Tepix 2y agoAt a large PHP shop, a successful exploit can be the end of the company.
- 1oooqooq 2y agoalmost everyone have all the things required for those exploits disabled. why would i accept performance penalty if i don't allow open('https://google.com https://google.com') to begin with? the correct action would be to remove all the stupid features everyone serious disable to begin with.
- Tepix 2y agoIt seems hard to "disable" the issues mentioned at https://dustri.org/b/upcoming-hardening-in-php.html https://dustri.org/b/upcoming-hardening-in-php.html
- justinclift 2y agoNo doubt there. It's just that providing a secure platform seems a tad more important.
- pier25 2y agoPHP is a bad choice to begin with if your use case is that performance critical
- phplovesong 2y agoPHP has always ben slow, its getting slightly faster, but still REALLY, REALLY slow for anything CPU heavy. This is why the ML crowd sticks with Python (numpy) thats incredibly fast. PHP is still lacking, there is no unicode support, and for a web language this is really bad. Also, the way PHP functions, makes modern web (like websockets) use impossible, there is hacks around this but they all kind of suck.
- chippiewill 2y agoActually PHP itself is very fast compared to Python, especially for an interpreted language. Python only seems fast because all the heavy duty number crunching libraries are actually written in C.
- phplovesong 2y agoYet, just a pip install away. In PHP this is not possible.
- johnisgood 2y agoJust a composer require away.
- nucleardog 2y agohttp://pecl.php.net/packages.php http://pecl.php.net/packages.php `pecl install Tensor`?
- deleted 2y ago[deleted]
- talkin 2y agoThis comment and all siblings fight over PHP vs Pyhton etc, but that just isn’t the bottleneck in most apps. By far, for most apps, the biggest bottleneck is the database.
- larsnystrom 2y agoI'm pretty sure this is wrong. PHP has been faster than Python for a long time, but numpy is not written in Python, it's written in C. Just like PHP, coincidentally :)