bugtraq - Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Mon, 01 Jan 2007 22:00:04 +0100
From: Tino Wildenhain <tino@...denhain.de>
To: Bill Nash <billn@...ln.net>
Subject: Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]

Bill Nash schrieb:
...
> 	*ANY* language implemented for *ANY* purpose is as secure as the 
> programmer makes it. The way the original post is written, 
> s/PHP/(Perl|ASP|C|bash|BASIC|four little buddhist monks fighting over an 
> abacus)/ is applicable. The vulnerabilities that we see, that Gadi refers 
> to, aren't widespread because PHP is widespread, but because insecure 
> applications written in PHP are. A better use of energy would be 
> focusing on the most vulnerable platforms and educating the developers.

But aparently they aren't educatable - hence they stick to this 
language. (Because of the many bad examples they can cut&paste
code from)

T.