Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #13100

Re: [CM] Falkvinge: MtGox had custom SSHD written in PHP

Show all headers | View raw

On 3/11/2014 6:49 AM, RS Wood wrote:
>  From the «That oughta work» department:

<snip>

> It gets worse. Karpeles didn’t just write his own remote-access security
> (“SSH server”). He did so in the programming language PHP, which is a
> dangerously unsafe language intended for low-security applications like
> displaying web pages. It basically has no error checking or safety nets of
> any kind. So not only did Karpeles think it was a good idea to do something
> that almost guaranteed MtGox to get hacked, he did so using one of the worst
> possible tools imaginable. It wasn’t enough to shoot himself in the foot and
> reload, he had to pick a bazooka to do it.
>

I disagree here.  Languages are not secure or insecure.  Programmers 
are.  PHP is no more or less secure than the programmer who writes it.

Someone without extensive experience in secure programming practices 
should not be coding a site like this.  One with extensive security 
experience can write it in any language he/she is experienced in.

-- 
==================
Remove the "x" from my email address
Jerry Stuckle
jstucklex@attglobal.net
==================

Back to comp.lang.php | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[CM] Falkvinge: MtGox had custom SSHD written in PHP RS Wood  <rsw@therandymon.com> - 2014-03-11 10:49 +0000
  Re: [CM] Falkvinge: MtGox had custom SSHD written in PHP john <nospam@no.net> - 2014-03-11 13:08 -0800
  Re: [CM] Falkvinge: MtGox had custom SSHD written in PHP Jerry Stuckle <jstucklex@attglobal.net> - 2014-03-11 17:23 -0400

csiph-web