Breaking PHP’s Garbage Collection and Unserialize

promised follow-up to https://news.ycombinator.com/item?id=12149357 (How we broke PHP, hacked Pornhub and earned $20k)