SecurityFocus

PHP security (or the lack thereof) Jun 16 2006 11:21AM
Darren Reed (avalon caligula anu edu au) (4 replies)

Re: PHP security (or the lack thereof) Jun 22 2006 12:15PM
john mullee (jmullee yahoo com) (1 replies)

--- Darren Reed <avalon (at) caligula.anu.edu (dot) au [email concealed]> wrote:
> From my own mail archives, PHP appears to make up at least 4%
> of the email to bugtraq I see - or over 1000 issues since 1995,
> out of the 25,000 I have saved.
>
> People complain about applications like sendmail...in the same
> period, it has been resopnsible for less than 200.
>
> Do we have a new contender for worst security offender ever
> written ?

I guess most of the remaining offending apps were written in C: as much as 96% ?!!
(including basically all of microsoft's stuff!!)

Surely the least secure language of all time !!!

Note also that no vulnerable apps were written in:
- cobol, rpg3, prolog, ada, scheme, lisp, pl/1, occam, modula-2, or MIX

We're planning to roll out our next enterprise ecommerce grid as a set of
modula-2 plugins to cobol-based container controlled by a dynamic gridded
application matrix written in prolog, all running on highly parallel
lisp machines.

;)

john

___________________________________________________________
All new Yahoo! Mail "The new Interface is stunning in its simplicity and ease of use." - PC Magazine
http://uk.docs.yahoo.com/nowyoucan.html

[ reply ]

Re: PHP security (or the lack thereof) Jun 24 2006 10:42PM
Darren Reed (avalon caligula anu edu au) (2 replies)

Re: PHP security (or the lack thereof) Jun 27 2006 05:47AM
Tonnerre Lombard (tonnerre lombard sygroup ch) (1 replies)

Re: PHP security (or the lack thereof) Jun 27 2006 10:27AM
Darren Reed (avalon caligula anu edu au)

Re: PHP security (or the lack thereof) Jun 27 2006 03:38AM
Ronald Chmara (ron Opus1 COM) (1 replies)

Re: PHP security (or the lack thereof) Jul 05 2006 04:17PM
Dan Falconer (dan avsupport com) (1 replies)

Re: PHP security (or the lack thereof) Jul 06 2006 06:47AM
Darren Reed (avalon caligula anu edu au)

Re: PHP security (or the lack thereof) Jun 19 2006 05:07PM
Neil Neely (neil frii com) (1 replies)

RE: [lists] Re: PHP security (or the lack thereof) Jul 16 2006 11:26PM
Curt Purdy (purdy tecman com)

Re: PHP security (or the lack thereof) Jun 17 2006 01:50AM
Jose Nazario (jose monkey org) (1 replies)

Re: PHP security (or the lack thereof) Jun 17 2006 06:06PM
Geo. (geoincidents nls net) (2 replies)

Re: PHP security (or the lack thereof) Jun 22 2006 01:01AM
Crispin Cowan (crispin novell com)

Re: PHP security (or the lack thereof) Jun 20 2006 04:54AM
kicktd (cooljay1804ml bellsouth net) (1 replies)

Re: PHP security (or the lack thereof) Jun 20 2006 10:02AM
Geo. (geoincidents nls net)

Re: PHP security (or the lack thereof) Jun 16 2006 11:06PM
Bojan Zdrnja (bojan zdrnja gmail com) (1 replies)

Re: PHP security (or the lack thereof) Jun 17 2006 05:08PM
Jessica Hope (jessicasaulhope googlemail com)