2026-10-23 12:14 UTC
Replies (7)
-
@canttakeitwithyou@lemmy.zip 2026-10-24 03:01
The sky is falling… Except it isn’t. Standard nonsense self advertising. And yes, vulnerabilities exist and canleasd to badness. We agree. It has always been so.
-
@magnolia_mayhem@lemmy.world 2026-10-24 03:59
Why are people mad? These issues existed and now they don’t. It’s not like the researchers created them
-
@SaharaMaleikuhm@feddit.org 2026-10-23 23:07
Imagine working in IT security. How bad a time are you having right now? Are we expecting things to become better or worse the next few months?
-
@muhyb@programming.dev 2026-10-23 13:27
-
@darthsundhaft@piefed.social 2026-10-23 23:11
Yeah, so here’s the thing. People keep trying to bash on PHP as if anything software isn’t manmade and comes baked with flaws that can be exploited. It’s the single reason why cybersecurity products are never going to stop being used because no matter what, it’s based on something somebody made. It’s going to be flawed or be exploitable by some means. Yesterday it was Log4J, now it’s PHP, tomorrow it will be something else. It will never end. Companies deliberately also use this to force you to upgrade because they’ve abandoned “legacy” products that still work but which they no longer choose to maintain because they want more money and need to stifle you for it somehow.
-
@python@lemmy.world 2026-10-23 13:05
I mean I’ll update my Node version, but until someone actually finds an exploit chain on a real system (instead of a vibecoded PoC) I don’t see any reason to panic. All these "could"s and "would"s in the article suggest that it’s kind of a nothing-burger imo
-
@BevsDad@lemmy.ca 2026-10-23 13:03
This what you get for running JS as your back end!