#PHP87 - Twitter Hashtag

7 days ago

FrankenPHP's creator, @dunglas, says its session ID leak, use-after-free and double free this year each came from state not reset between requests: PHP's engine can't tell when a request ends. He wants to change that. Full rundown in the first reply. #PHP #PHPInternals #PHP87

1

5

0

1

418

Len Woodward

@ProjektGopher

about 1 month ago

PHP's default password hash only reads the first 72 bytes of your password. Last week's plan to refuse longer ones split the list. This week, a fix that breaks nothing arrived, borrowed from a Python library. Full rundown in the first reply. #PHP #PHPInternals #PHP87

1

4

1

0

6K

Len Woodward

@ProjektGopher

about 1 month ago

Pick a password longer than 72 bytes and PHP's default hash keeps only the first 72, so a shortened password still logs you in. An RFC wants PHP to refuse instead, and the list can't agree it's worth the break. Full rundown in the first reply. #PHP #PHPInternals #PHP87

1

4

2

1

530

Top Tweets for #PHP87

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users