3 ms·
That's because blaming the language for this hack is silly and simple minded. php had nothing to do with the multitude of failures in basic security practices
by sanswork 12y ago
That's because blaming the language for this hack is silly and simple minded. php had nothing to do with the multitude of failures in basic security practices that happened here.
- spacemanmatt 12y agoNo, it's not, because PHP is hack on top of hack, and forces programmers into a persistent defensive posture. This is what happens when you force developers and sysadmins into defensive posture.
- sanswork 12y agoWhich language doesn't require a programmer to be in a persistent defensive posture when dealing with bad actors?
- spacemanmatt 12y agoFine, you can always find a defense, but my basic point is that PHP forces you to find them all. Many languages do not threaten to undermine very reasonable code in entirely unreasonable ways. I thought PHP would be great, when I was a junior sysadmin with programming aspirations and that CGI stuff looked like a hot mess. Today, I recognize it as a fractal of bad design. http://eev.ee/blog/2012/04/09/php-a-fractal-of-bad-design/ http://eev.ee/blog/2012/04/09/php-a-fractal-of-bad-design/
- sanswork 12y agoI don't understand what you're trying to say here "you can always find a defense, but my basic point is that PHP forces you to find them all.". What features of other languages make them inherently more secure than php? Do you know of any that aren't admin issues? Yourself and the other person in this thread loudly claiming php is the reason for this are both doing the same thing. Handwaving around bad language design without pointing out anything concrete about security. Do you know the answer to the question or are you just parroting?