something that's been bothering me about the phpocalypse - which, talking with @rain I was able to put a pin in, after they pointed out what they would do in a similar situation - is that this doesn't feel like a security patch at all.

[argv_minus_one@mastodon.sdf.org]

@munin

No, although I've heard the rumors.

But like, it doesn't take 2 months for a bot to generate something.

@pikhq

[jernej__s@infosec.exchange]

@argv_minus_one @munin @pikhq See https://chitter.xyz/@JennyFluff/117481147340068318

[argv_minus_one@mastodon.sdf.org]

@jernej__s

Yeah, I saw that. Not sure how to reconcile that with how long it took.

@munin @pikhq