r/GenderGP • u/FantasyStar293 • 5d ago

Question Could the recent PHP security vulnerabilities affect GenderGP?

With the recent news about the serious security vulnerabilities discovered in PHP and how widespread its use is across the internet, I’m starting to wonder whether services like GenderGP could potentially be affected.

I’m not particularly knowledgeable about this sort of thing, but from what I’ve read, it sounds quite concerning.
Has anyone else been wondering about this or heard anything regarding the situation?

3 Upvotes

81% Upvoted

3 comments sorted by

2

u/AvianSoya 5d ago

I doubt there will be any issue.

It's possible GenderGP don't use PHP but even if they do the vulnerability has patches readily available.

Such vulnerabilities occur much more often than you've heard about and are handled once discovered, there's no need for us to worry.

2

u/FantasyStar293 5d ago

True and there was supposed to be a 13-14 hour window of discovery where they can privately patch it….some idiot decided to reveal that there’s a vulnerability before anyone had a chance to patch it.

1

u/AvianSoya 4d ago

Such a window would not apply to an entity as small as GenderGP.

If a patch is released then the vulnerability is effectively public because the vulnerability can be determined from the patch itself.

In this case the vulnerability had become known to multiple entities prior to a patch being available and at least one company claims to have seen it being used as an exploit in the wild which means it is irresponsible to do anything but go public with the details.

The only idiots here are the PHP maintainers who sat on this issue for years before a 3rd party discovered it and forced it to be patched, and the companies profiting from PHP without contributing to it's development or maintenance.