Volunteers make Vancouver PHP Conference work (Linux.com) [LWN.net]

Linux.com covers the Vancouver PHP Conference. "More than 225 developers attended the second Vancouver PHP Conference at the University of British Columbia's Downtown Campus in Vancouver Canada this week. Organized by the Vancouver PHP Users Group, the conference attracted many of the best-known names in the PHP world, including Rasmus Lerdorf, Andrei Zmievski, Damien Seguy, and Zak Greant. The result was a well-rounded conference that shows what an experienced group of volunteer organizers can accomplish."

(Log in to post comments)

"Don't worry too much about security"

Posted Feb 19, 2007 1:50 UTC (Mon) by xoddam (subscriber, #2322) [Link]

Lerdorf also told the audience, "Don't worry too much about security," arguing that most problems in PHP programs would be buffer overruns, and require local access to exploit. Instead, he suggested, security problems were more appropriately approached on the operating system level.

I don't understand how local access would be required to exploit problems in programs, and in a programming language implementation, which are explicitly intended to be network-facing. I have never executed a PHP program with 'local access', only via HTTP. The same must apply to at least 99.9% of PHP scripts and services.

I suppose some people just don't want to learn.