Hacker News Reader

By now I've seen at least 5 different people or companies blamed for leaks or releasing fixes early.

If anyone is at fault here, I'm looking at the PHP maintainers.

The embargo apparently held for like two months, during which they have not managed to release patches.

AFAIK it's pretty much to allow the security cabal of companies that get the early access to fix their stuff first before the dirty public can be granted privilege of fixing the bugs.

I've been wondering about this in general. The Glasswing/Mythos and whatever the OpenAI equivalent is seem to be creating a privileged caste, on the other hand opening it up quickly means more attacks. Maybe a defined sunset for cyber capabilities being gated is the answer?

> If anyone is at fault here, I'm looking at the PHP maintainers.

There's a reason the moniker PHP was "pretty horrible programming".

And well, things haven't changed in that regard.

Reply on news.ycombinator.com