Lack of staff and funding likely led to the recent PHP security snafu; project has only one full-time employee, but that's just the tip of the iceberg — a dreary situation caused by services running old versions with no support
www.tomshardware.com
Never underestimate the power of complacency, the destroyer of internets.

70% of the world’s internet btw, but out-of-support deployments and little funding for permanent staff to manage the open-source project.

  • aanes_appreciator [he/him, comrade/them]@hexbear.netOPEnglish
    2·
    1 day ago

    honestly I agree. although the lack of resource and funding (which could have mitigated the effects of this in the first place!) the fact is that PHP was someone’s weekend project and a temporary fix to that person or use case, and it became an instantaneous permanent solution with all of the horrifying technical debt that came with it.

    better yet, we keep reinventing the fucker with endless yaml templating systems lmao