Sentry's security lead challenges "php2shell worst day in cybersecurity" claims
joshua_saxe · x · 2026-10-23
Joshua Saxe (Sentry) pushes back on claims that php2shell is "the worst day in cybersecurity history." He argues any such claim must explain, via clear technical mechanisms and attacker motivations, why this outweighs past risks: countless celebrity vulns and exploit PoCs, serious TCP/IP/DNS protocol bugs, worm outbreaks, nation-state attacks on critical infrastructure, kernel packet-parsing bugs, and the proliferation of AI social-engineering and hacking tools since 2022. snewmanpv frames the real question: cyber doom has been predicted before and didn't materialize — explaining why is key to predicting whether this time differs.
More from AGI Musings
- Sam Altman says OpenAI's best internal model is too powerful to release anytime soon — rohanpaul_ai · 2026-10-23
- 'Human code is made of holes': debate on whether AI can ever plug every vulnerability — teortaxesTex · 2026-10-23
- IT cloud-migration surveys from 2010-2015 show why AI era practitioner forecasts deserve skepticism — matt_slotnick · 2026-10-23
- Derya Unutmaz doubles down: AI never hit a wall and 'AI winter' will never return — DeryaTR_ · 2026-10-23
- Tech infra manias historically last 4-6 years — next year is AI's fifth — oran_ge · 2026-10-23
- Mathematicians launch MathHelm to crowd-review OpenAI's 722 AI-generated math papers — fortnow · 2026-10-23