Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:112885 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 33052 invoked from network); 14 Jan 2021 19:15:55 -0000 Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5) by pb1.pair.com with SMTP; 14 Jan 2021 19:15:55 -0000 Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 01FFB1804E3 for ; Thu, 14 Jan 2021 10:54:27 -0800 (PST) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-0.2 required=5.0 tests=BAYES_20,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_NONE autolearn=no autolearn_force=no version=3.4.2 X-Spam-Virus: No X-Envelope-From: Received: from mail-qt1-f181.google.com (mail-qt1-f181.google.com [209.85.160.181]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Thu, 14 Jan 2021 10:54:26 -0800 (PST) Received: by mail-qt1-f181.google.com with SMTP id g24so4278450qtq.12 for ; Thu, 14 Jan 2021 10:54:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=benramsey.com; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=FzPCiTqHtVoAtrYJpPIoFWHjVdgPMw5wD9HtOaVpEPw=; b=EdQzSirPVCFeWeKt0yR7MukgctTJGqIYdigO9cIaFw6E2+2uddLcGdZXOeMhLM/9hN GLCQk6oRTPdymIj+zBe0ZWaaANQoRqjc5gHQP1qixZmGUX/DcTp3o8BDdA0hA4aXXlID 2pXx577Cou/u4oGmcZboH+n4AqzLnhGhiHirxSNQvTI9r6ZQFEmPSjXss/YIoMmlBnyd nHjiYAviGPsxMtYCM5EqpBe7d5/zkFx1OSQh55vOFpGodpRFA655Ij5LKMhUfQ2hjkEW u9IyognK1/q81QSA/Ca1kLHgV3q9kTVZnQQ2bVJji9x7NvgrlH9d2atdY17HdeBZ0rnZ OutQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=FzPCiTqHtVoAtrYJpPIoFWHjVdgPMw5wD9HtOaVpEPw=; b=G70I/MAexIyX7ErU2qgUgLlygLd6egOKd97cBk4oyP2VX0ZwJ65uR5J0Q5F1yRY/0E 7npOOHnRTxpSVEgyWM6iAJfAo5RshX1gHljPotYyyS+Z/9RBu18QlRMI2bu3Zo9+T6vl tsqPovy6YxQBIXbBqMKcwnQaX1k5mqd9rJMNKooxFaLBqYV8SI5ka9SZ5nJumjNJTrjG 2gSoXz1zqYIc5az114wXwLAjqmWi1N87jXyMKsb5xorfv20OEpeZ7+d201Zn7A6DyuRl UAx5mFQsbBihHITC1R9OLz9aRUKrGlF/LxDQUNaNUfRp0xCYw0IooJgOT7qZ5wmLH7Cf cFRw== X-Gm-Message-State: AOAM533elaAaySopcvLqvVfxTQgN2rBM2bzT6OihQAUJ7Z7il3b9Tcnq LL1k2P0wRkZj2DeTm1fCfEjK3g== X-Google-Smtp-Source: ABdhPJxs8zLTHGrHdHW1ZK/ET4XkmM2xEDnccOsW9toR8NN/5vPpvmTiFh9ZppQRmnAD6fLssY2yfg== X-Received: by 2002:ac8:3598:: with SMTP id k24mr8528082qtb.72.1610650464816; Thu, 14 Jan 2021 10:54:24 -0800 (PST) Received: from ip-172-24-0-209.ec2.internal (ec2-34-196-181-12.compute-1.amazonaws.com. [34.196.181.12]) by smtp.gmail.com with ESMTPSA id c14sm3338623qtp.4.2021.01.14.10.54.24 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 14 Jan 2021 10:54:24 -0800 (PST) Message-ID: <0461335A-43A4-44CA-858C-03B09206C947@benramsey.com> Content-Type: multipart/signed; boundary="Apple-Mail=_71CAA8EC-DB90-4AB3-9C81-4D32CC6BA420"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Date: Thu, 14 Jan 2021 12:54:22 -0600 In-Reply-To: Cc: Larry Garfield , php internals To: Chase Peeler References: <44b68dc6-ed95-c8f9-ad00-2457374b1d74@rhsoft.net> X-Mailer: Apple Mail (2.3608.120.23.2.4) Subject: Re: [PHP-DEV] Abusive emails was: silly question : what is more secure at the moment, php7, php8, or plain .sh shell scripts? From: ben@benramsey.com (Ben Ramsey) --Apple-Mail=_71CAA8EC-DB90-4AB3-9C81-4D32CC6BA420 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Jan 14, 2021, at 10:44, Chase Peeler wrote: >=20 > On Thu, Jan 14, 2021 at 11:40 AM Larry Garfield = > wrote: >=20 >> On Thu, Jan 14, 2021, at 4:29 AM, Kris Craig wrote: >>>>=20 >>>>> and as explained in the past: if *you guy* ever again contact my >>>>> employer asking for the law department beause you think some >> bugreport >>>>> written late at night with a obfuscated email was from me i will >> *find >>>>> and fuck* you >>>=20 >>>=20 >>> Wait did somebody actually contact this troll's employer?! Seems = like an >>> unnecessary escalation to me. I think this may be a perfect example = of >> the >>> timeless wisdom of the phrase, "Do not feed the trolls." >>>=20 >>> Might be better to just block all of his known emails from the list. = If >> he >>> gets around this by emailing people individually, I agree that = publishing >>> it here with the email address included would be useful, as it would >> enable >>> everyone to individually block their emails then. >>>=20 >>> --Kris >>=20 >> Point of order. "Don't feed the trolls" may be timeless, but there = is >> absolutely nothing wise about that saying. It's the "turn the other = cheek >> when the bully punches you in the face" advice, and it backfires = horribly. >>=20 >> Telling people to individually block an abusive user with many email >> addresses is putting all the effort of dealing with an abuser on the >> victims. That's the worst possible advice one could give. >>=20 >> cf: https://peakd.com/community/@crell/why-you-can-t-just-ignore-them >>=20 >> Please, for the love of all that is holy, expunge "don't feed the = trolls" >> from your mind. It's counter-productive and destructive advice. >>=20 >>=20 > I agree with this. I'd also add that in this case, we aren't even = feeding > this troll. He lurks on the list and sends private replies to people. > Usually those replies nitpick on something that isn't even the main = point > of the discussion. The only way to "not feed" this troll would be to = not > participate at all. While we don=E2=80=99t have a formal code of conduct for this = list/project, most codes of conduct would consider communications = initiated within project forums to remain under the code of conduct = rules even when taken off-list (private). This is similar to the idea (in many US school districts) that students = who participate in fights off-campus can be punished under school rules = because the disagreements originated on campus. And workplace harassment = can lead to employment termination, even if the harassment took place = after hours and somewhere other than the office. So, in my opinion, any private responses to official mailing list posts = should be covered under any community expectations and behavior rules we = want to enforce. Cheers, Ben --Apple-Mail=_71CAA8EC-DB90-4AB3-9C81-4D32CC6BA420 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iHUEAREIAB0WIQToXQMR3fpbrPOmEOewLZeYnIwHGwUCYACTXgAKCRCwLZeYnIwH GzFTAP9QKF4a7tiOt6WOC2BW+/DXFCAKxmpIjrKnJps4f3KaBQEAiaDtbI4d8z40 b4E53sMS1EFwu2uNtvzdgOyw0QM9FTM= =sd26 -----END PGP SIGNATURE----- --Apple-Mail=_71CAA8EC-DB90-4AB3-9C81-4D32CC6BA420--