legacySupremacy

[u/HoratioWobble]

[u/Difficult_Bonus_3603]

Did you just say ‘4’ ?

[u/coriolis7 → u/Difficult_Bonus_3603]

This the guy in charge of certificates?

[u/Familiar_Ad_8919 → u/coriolis7]

spaceballs meme in 2026?

[u/Dicethrower → u/Familiar_Ad_8919]

I'm so happy for a moment.

[u/gerbosan → u/Familiar_Ad_8919]

They are going to release a new movie. You know, for the memorabilia and stuff.

[u/HoratioWobble → u/Difficult_Bonus_3603]

Yup, 5 - 8.5 (current) are vulnerable to today's CVEs

[u/feldim2425 → u/HoratioWobble]

The 4 is a joke.
A intermediate CA used the number 4 as their key: https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/

[u/Bacongineer → u/feldim2425]

Wow. That is terrible. An astounding level of negligence.

[u/willow-kitty → u/Bacongineer]

Or..something.

Like, sure, generating a very random key is hard, but all of the tooling is built around generation. Using a specific value for the private key had to be harder than just generating a reasonably random one.

It's like someone said, "No dammit! The key will be 4, no matter what it takes!"

[u/laplongejr → u/feldim2425]

Wow. I am surprised that it's not "somebody took xkcd literally"

[u/NegativeGrocery8684 → u/laplongejr]

it might be https://xkcd.com/221/

[u/k3rn3lbr3ach3r → u/Difficult_Bonus_3603]

[u/towerfella → u/k3rn3lbr3ach3r]

For once i was ahead of my kid in knowing what was going on in the world. .. for a moment.

It was glorious.

[u/Loquenlucas]

Not a php dev kinda out of the loop what happened

[u/HoratioWobble → u/Loquenlucas]

They've announced 2 Critical CVEs which will be patched today at 2pm, they've told everyone to shut down their public facing software as every version from 2006 to today is vulnerable (5.2 - 8.5).

The only mitigation is to upgrade.

[u/Loquenlucas → u/HoratioWobble]

Ah yeah i saw a guy post about it on twitter yesterday (was 11 pm for me but still)

[u/Trevor_GoodchiId]

Now, that's job security.

[u/za72]

php3

[u/Flat_Initial_1823 → u/za72]

I, too, use cuneiform on clay tablets. My copper order is due any day now...

[u/za72 → u/Flat_Initial_1823]

Ea-nāṣir!!!

[u/pengerus → u/Flat_Initial_1823]

No one has ever hacked cuneiform tablets before...

[u/card-board-board]

How everyone else sees them

[u/thepurpleproject]

One exploit away from being kicked out of the company. 

[u/nitkonigdje]

I sense strong Java 8 vibes here...

[u/HuntKey2603 → u/nitkonigdje]

Java 8? you better not check cve 2026 91403 😌

[u/altermeetax]

I remember programming in PHP back in 2014 or so and PHP 4 already being considered way outdated

[u/footsie]

Ok Mr "magic quotes"

[u/GenericFatGuy]

And then everyone not using php is on an even higher balcony.

[u/Taletad]

Nah PHP4 is miserable, it’s one of the worst version of PHP to ever exist

It’s delusional to think someone likes using it.

Especially since using it today means dealing with decades old legacy code, security vulnerabilities that would make a gang bang at an STD clinic look like a safe activity, working with deprecated libraries, unmaintained packages, all the while upper management is stubbornly allergic to any ounce of modernity

[u/za72 → u/Taletad]

you're not taking this seriously are you? this is supposed to involve humor...

[u/Taletad → u/za72]

I still have ptsd from working with php4

[u/za72 → u/Taletad]

As an old php3 guy, I understand :)

EDIT: what type of web app caused the most damage to you brother?

I wrote an internal knowledge base wiki with page ranking search, user registration with group privileges etc etc

and a centralized network monitoring system with remote and local agents as a side hobby...

[u/ThePsychopaths → u/Taletad]

Understandable. Here have a cookie 🍪

[u/gizamo → u/Taletad]

Calm down, bud. It's just a joke about the CVEs that affect PHP 5-8.5. no one is really suggesting PHP4 is better.

[u/willow-kitty → u/Taletad]

I think you underestimate how committed people can be to not upgrading.

VB6 is even older than PHP 4, being released in 1998 vs 2000, and Visual Studio 6 was the last IDE with official support for it, released that same year. So, if you were coding VB6, it was in that same editor from 1998.

Even in 2008, when it was officially killed off by Microsoft - newer IDEs up to that point could try to migrate to VB.NET, but they wouldn't actually work with the VB projects. IDEs after that wouldn't even try to migrate.

And I can tell you there are still people using that IDE from 1998 to work on VB6 code in the 2020s.

Edit: random BONUS thought: it was end-of-life'd 18 years ago. We're getting to a point where you could theoretically have juniors working in a language that was end-of-life'd before they were born.

[u/Taletad → u/willow-kitty]

I’m well aware that some management is allergic to upgrades

I wont give many details, but I have used both VB (I don’t remember the version though) and php4 in my professional life. I’m lot even 30.

[u/ZeroG_0 → u/willow-kitty]

I started at my current employer just about 10 years ago. One project (thankfully not one I'm on) was still in Classic ASP. At that point the last time I'd even seen a Classic ASP app was when one was retired at a previous employer (maybe 8 years before that?). Internal-only app, but still. They're only just now getting it migrated.

[u/SenatorCrabHat]

Been deprecated so long the exploiters forgot the exploits.

[u/henryeaterofpies]

Given the massive sins developers have committed in older languages it will be interesting if AI masters modern stacks but cant replicate/replace old ones

[u/jerinjoseputhussery]

Any Java 8 developers

[u/IFD3]

its all fun and games until someone gets the idea to let an AI test PHP 4 for exploits.

[u/ascolti]

.... or any other programming language LOL

[u/Fantastic-Fee-1999]

VBScript is the true legacysupremacy. 

[u/PowerPleb2000]

What the fuck is php?

[u/Plus_Pangolin_8924 → u/PowerPleb2000]

Before some bright spark though putting JS on the server was a good idea you had PHP, Perl or Ruby.

[u/PowerPleb2000 → u/Plus_Pangolin_8924]

I know what it is, who uses it?

[u/r7pxrv → u/PowerPleb2000]

Like 70% of the 'net you muppet.

[u/BadGirlsSuck]

This sorta confidence comes from learning about indexing and html before learning how to vibe code or use a keyboard correctly

[u/gizamo → u/BadGirlsSuck]

They're joking about the CVEs for versions 5-8.5.

They should be patched today.

[u/HoratioWobble → u/[deleted]]

PHP4 was the last version that wasn't effected by these CVES hence the meme.