Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:87154
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain lerdorf.com designates 209.85.220.54 as permitted sender)
Message-ID: <55A407E1.9020005@lerdorf.com>
Date: Mon, 13 Jul 2015 11:48:01 -0700
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0
MIME-Version: 1.0
To: Matt Tait <matt.tait@gmail.com>, internals@lists.php.net
References: <CAEZfaM7CJZhNzZBSWwSuEwXLzyELHe+JQrU0aQgMn1cqsCLVVQ@mail.gmail.com>
In-Reply-To: <CAEZfaM7CJZhNzZBSWwSuEwXLzyELHe+JQrU0aQgMn1cqsCLVVQ@mail.gmail.com>
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="J3Ib2u8dcUX2UT27DVormkg2pxrxTkUc3"
Subject: Re: [PHP-DEV] Introductions
From: rasmus@lerdorf.com (Rasmus Lerdorf)

--J3Ib2u8dcUX2UT27DVormkg2pxrxTkUc3
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 07/13/2015 11:23 AM, Matt Tait wrote:
> Hi all,
>=20
> I'm Matt Tait; a security researcher at Google, and I'm quite intereste=
d in
> looking at and helping to build new security-related features within PH=
P;
> i.e. features that reduce the likelihood that deployments of PHP end up=

> being hacked.
>=20
> In the short term, I'm quite interested in looking at ensuring that all=
 of
> the compiler and operating-system security features are enabled by defa=
ult,
> and later I hope to be looking at both hardening the PHP core against
> various categories of memory-corruption vulnerability. Hopefully this w=
ork
> will also end up improving the performance and security of various part=
s of
> PHP core.
>=20
> In the longer-term I'm also interested in building user-visible feature=
s
> for PHP that would allow developers who want or need to deploy PHP to
> sensitive environments to prevent certain categories of error across th=
eir
> entire codebase (such as SQL injection and so on) that are commonly use=
d by
> hackers. This would be particularly useful for many less-technical
> companies who are worried about hackers, but unable to ensure that ever=
y
> component they plug in to their website is coded with security-in-mind.=

>=20
> I look forward to working with you all to make PHP a better product for=
 PHP
> developers and website owners!

Sounds great.

There is some intro info along with the git account request form here:
http://php.net/git-php.php

-Rasmus





--J3Ib2u8dcUX2UT27DVormkg2pxrxTkUc3
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlWkB+EACgkQlxayKTuqOuA2mACdH0sI0wPLSh5+HPS9x0EhqVCM
uS8An1uKk0lhGOREI/ycaSSJkxDX584C
=J0ZL
-----END PGP SIGNATURE-----

--J3Ib2u8dcUX2UT27DVormkg2pxrxTkUc3--