• TRM (USD/COP)COP 3,235.59 +1.65% +COP 52.60Colombia's official exchange rate (Financial Superintendence), valid Nov 4 to Nov 4
  • EuroCOP 3,617.08 +1.72% +COP 61.02Reference: TRM crossed with the European Central Bank rate of Nov 3; not the market quote
  • Mexican pesoCOP 173.98 +3.35% +COP 5.64Reference: TRM crossed with the European Central Bank rate of Nov 3; not the market quote
Quilla NewsFinance & Technology
ENES

The Czech engineer who shipped the PHP patches: "We will never be completely secure again"

TechnologyInternationalEl Confidencial45 s readAI summary
Image: El Confidencial

A model from OpenAI discovered two serious vulnerabilities in PHP, the open-source language that early estimates suggested could affect 7 out of 10 websites. The PHP Foundation released the patches and Ondřej Surý, an engineer in the Czech Republic, took on the unpaid work of packaging and distributing them. The flaw, dubbed php2shell, had been present for 14 years. Surý warns that many systems will never receive the update and that full security will not come.

In 45 seconds

  • An OpenAI model found two serious PHP vulnerabilities that allowed remote code execution; early estimates said 7 out of 10 websites were affected.
  • Ondřej Surý packages and distributes the PHP Foundation's patches for free, including for versions of the language without official support.
  • The flaw, called php2shell, had been in the language for 14 years; OpenAI says it worked with the foundation for two months and Greg Brockman admitted the process was "slow and too manual".
Read the full story at El Confidencial

IASummary generated by artificial intelligence from a story by El Confidencial. It may contain errors: the original source prevails.

Comments

Be respectful. Comments reported by several people are hidden until a moderator reviews them.

You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.

    Keep reading