PHP's two critical flaws expose a foundation running on one full-time staffer
CtrlAltDwayne · x · 2026-10-24
Per Reuters, two serious PHP flaws discovered this week triggered a global scramble to secure websites, underscoring how critical the 30-year-old open-source language remains.
Yet the PHP Foundation runs on a shoestring: Executive Director Elizabeth Barron says it has one full-time staffer (herself) and 14 mostly part-time contractors, an unpaid volunteer board, and funding from donations and grants. The poster argues this was inevitable given the tiny budget, and that companies profiting off PHP (like Envato) don't support it proportionally.
More from Safety
- Claude Code audit finds 214,856 "permanently deleted" photos lurking in Android hidden cache — Loo_Atreides · 2026-10-26
- Microsoft patches Authenticator flaw (CVE-2026-80097, CVSS 8.6) letting zero-permission apps steal tokens — basedjensen · 2026-10-26
- CNN: AI is exposing how fragile the web really is — and what users can do about it — cnn · 2026-10-26
- IIT Madras hosts AI Governance conclave with 400+ attendees on responsible AI — ravi_iitm · 2026-10-26
- “CIA watching everyone patch ‘security vulnerabilities’” goes viral — tekbog · 2026-10-26
- Weight-tampering worm scenario for near-frontier models called 'somewhat scary' — teortaxesTex · 2026-10-26