new | show | ask | jobs Github

barelysapient 7 hours ago

This might be the nail in the coffin for php.

▲

mappu 6 hours ago | parent | next [-]

I expect it will be the death of the C codebase which will get an oxidation push.

▲

skoskie 7 hours ago | parent | prev | next [-]

This is a joke, right? I can't tell if this is a joke.

▲

system2 5 hours ago | parent [-]

It probably is but I am converting everything to python already.

▲

Synthetic7346 4 hours ago | parent | next [-]

Not rust?

	▲	system2 3 hours ago \| parent [-]
		I am used to Python. Hard to switch to something else until I am forced to. I am trying to manage agentic coding at least to the point where I can identify bugs with my own eyes instead of purely believing the LLMs. I know I will cheat and let an LLM take over the entire Rust app if I tried.

▲

reddalo 3 hours ago | parent | prev [-]

...and make no mistakes!

▲

aussieguy1234 6 hours ago | parent | prev | next [-]

Given the proven capabilities of LLMs in computer security, get ready for similar issues to affect NodeJS, Java, Go, Rust etc...

▲

mappu 5 hours ago | parent [-]

NodeJS and Java are in a similar place (this CVE is a memory safety issue in PHP's C-language interpreter) but Go's compiler/runtime is written in Go and is memory-safe all the way down to the assembly.

▲

minitech 3 hours ago | parent | next [-]

Much of Node’s standard library is written in JavaScript, which can’t go on to exploit V8 vulnerabilities even given similar types of bugs, so I wouldn’t say it’s in a similar place. Not as familiar with Java, but I expect PHP is in a class of its own here.

▲

aussieguy1234 2 hours ago | parent | prev [-]

Looks like we now have a similar release happening for NodeJS

https://nodejs.org/en/blog/vulnerability/october-2026-securi...

	▲	minitech 2 hours ago \| parent [-]
		Blog post from a week ago with no “CRITICAL”, any reason to expect it not to look like the last one (https://nodejs.org/en/blog/vulnerability/july-2026-security-...)?

▲

qwm 2 hours ago | parent | prev | next [-]

I wish

▲

tonymet 7 hours ago | parent | prev | next [-]

Don’t you mean WWZ ? Php is hardly dead – billions of installs.

▲

aksss 6 hours ago | parent | prev | next [-]

“PHP is the cockroach of the internet”

▲

lolakutty 6 hours ago | parent | prev [-]

People ll continue to use it for fear of hurt feelings...