Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:72408
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.213.53 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <52F657E4.4030603@cubiclesoft.com>
References: <52F61A78.1020401@lsces.co.uk>
	<CAF+90c9ZmeysC88ghHk50rpv_8T4jYhGCWEDwZxOR5EmPuDDLg@mail.gmail.com>
	<52F62B08.6050201@ajf.me>
	<52F63DDE.6090600@lsces.co.uk>
	<CAEZPtU5-DnNeFFJDGYG+YHjL_SOddNeiqcoJp_Ye2G+Lgdu2ow@mail.gmail.com>
	<52F657E4.4030603@cubiclesoft.com>
Date: Sat, 8 Feb 2014 16:31:29 +0000
Message-ID: <CALwr1GmBo6MswwMFABP-+X=eMCAke5DBv+d77D2y+d0BmxCT2g@mail.gmail.com>
To: Thomas Hruska <thruska@cubiclesoft.com>
Cc: PHP Development <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: [PHP-DEV] Security Diligence
From: padraic.brady@gmail.com (=?UTF-8?Q?P=C3=A1draic_Brady?=)

Hi,

On 8 February 2014 16:14, Thomas Hruska <thruska@cubiclesoft.com> wrote:
> On 2/8/2014 7:26 AM, Pierre Joye wrote:
>>
>> Lester, this is not a support list.
>>
>> It is your good right to stick with dead PHP versions and 10 years old
>> code (whether it is your choice or not), but it is definitively not
>> good to constantly posts totally off topic posts, replies or complains
>> about what we do or don't. It is even more annoying in cases where you
>> clearly do not understand the underlying reasons of one feature or
>> another.
>>
>> That being said, I would love to see you actually contribute something
>> for a change.
>
>
> How about giving Lester a hard-and-fast deadline to contribute something
> useful by?  (Being sure to clearly define "useful" in the process.)  If h=
e
> fails to meet the expectations by the deadline, he gets unceremoniously
> booted off the list.

The guy posed some doubts on the validity of what two RFCs intended to
do in PHP 5.6. It might be off-topic as not being directly linked to
the RFC, but going overboard isn't going to change matters. If you
really want to change someone's habits you need only ignore them ;).
In this case, I responded because drilling some sense of security into
programmers is something I view as important (as my blog attests).
It's worth having a response on the list for the record for anyone
else harbouring unwritten doubts about the efforts of the RFC authors,
but are not keen on airing them. The RFCs do imply some awareness of
security and that's largely unavoidable unless each and every RFC
needs to be a 1000 page masterwork ;).

Paddy

--
P=C3=A1draic Brady

http://blog.astrumfutura.com
http://www.survivethedeepend.com
Zend Framework Community Review Team
Zend Framework PHP-FIG Representative