Oct 21, 2026, 4:42 PMreading https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/ and holy *fuck* what a clusterfuck of a disclosure process
calif and chainguard, what the *fuck* were you thinking
#php
Oct 21, 2026, 4:46 PMI guess "responsible disclosure" is only for individuals huh, shitty opportunistic 'infosec' and 'AI' companies can just do whatever the fuck they want if it makes them a buck
fuck these people
Oct 21, 2026, 4:50 PMI am really angry about this. I know what kind of shit legitimate security researchers have had to go through in the past, being prosecuted and retaliated against for reporting things in the public interest, until eventually a rough consensus was reached that security issues had to be fixed promptly actually
they didn't bleed just so your shitty slop company could get a couple headlines and sell your planet-destroying lying machine by profiteering off other people's misery and panic
@joepie91 should've directly done fully responsible, public disclosure.
Full disclosure is the only sane way to avoid all this drama. Nobody get's an unfair head start. No intel leaks ahead of time.