Vitavonni

Thu, 14 Dec 2006

PHP (in-)security news

An important PHP security developer retires, with some rather harsh words on the project and PHP security.

While I agree that PHP by itself isn't really insecure (actual security bugs excluded), the one thing I really blame PHP for is that it does not assist the developer at all in writing secure applications. On contrary, give a novice PHP developer some non-trivial task involving a database and some extra files and you'll have at least two security issues.

I stopped using PHP some years ago for a few reasons, including above "security issues by default" (which IMHO are due to a badly designed language) and because PHP is heavily encouraging the user to mix design and application (which is a pain from a maintainance point of view). Of course you could do model-view-controller in PHP, but it doesn't make it easy to do so (another thing why I consider the language to be badly designed). And don't get me started on "register_globals"...

OTOH, some years ago I maintained a PHP extension, ming, which has recently found it's way back into Debian. Back then, I had the impression that PHP itself is also a pain to package. Building an extension worked okay, but it seemed as if getting PHP to build and work reliably on all architectures with all extensions is a pain. (That maybe is why the php packages have many open bugs; and why it took e.g. four years to add packages for the pspell extension)

[category: /en | Permalink]

Enigma 1.00 final

It's out - and barely missed the etch freeze, so we'll still ship the previous version. But the 1.00 version is sitting in the Debian NEW queue (I moved the manual to it's own package, so this needs ftp-master intervention); a recent beta is already in unstable for you to begin playing.

Enigma is a game with a great mixture of mouse skill and puzzle elements. Some levels rely on precise mouse movements, others on speed, and others are pure puzzle levels. And of course everything inbetween. Sometimes you have to use items in a clever way, sometimes control several marbles at once, or switch control between two marbles as needed (some of these levels will be playable in a multiplayer mode sometime). It's the smooth mouse control (which varies from floor type, too bad we don't have force feedback...) and this unique mixture that makes it so great.

If you've ever played Oxyd on Atari ST or Mac (later versions were also available on MS DOS) - then you'll definitely want to get enigma - it's a clone of that classic, and it can load levels from your Oxyd data files, if you want to play the original levels.

[category: /en | Permalink]
Menu
[planet.debian]
[planet.xmlhack]
[planet SELinux]
[munichblogs]
[email]
[RSS 2 feed]
[English RSS 2]
Categories
< December 2006 >
SuMoTuWeThFrSa
      1 2
3 4 5 6 7 8 9
10111213141516
17181920212223
24252627282930
31      
Archives
2010-Mar
2010-Feb
2010-Jan
2009-Dec
2009-Nov
2009-Oct
2009-Sep
2009-Aug
2009-Jul
2009-Jun
2009-May
2009-Apr
2009-Mar
2009-Feb
2009-Jan
2008-Dec
2008-Nov
2008-Oct
2008-Sep
2008-Aug
2008-Jul
2008-May
2008-Apr
2008-Mar
2008-Feb
2008-Jan
2007-Dec
2007-Nov
2007-Oct
2007-Sep
2007-Aug
2007-Jul
2007-Jun
2007-May
2007-Apr
2007-Mar
2007-Feb
2007-Jan
2006-Dec
2006-Nov
2006-Oct
2006-Sep
2006-Aug
2006-Jul
2006-Jun
2006-May
2006-Apr
2006-Mar
2006-Feb
2006-Jan
2005-Dec
2005-Nov
2005-Oct
2005-Sep
2005-Aug
2005-Jul
2005-Jun
2005-May
2005-Apr
2005-Mar
2005-Feb
2005-Jan
2004-Dec
2004-Nov
2004-Oct
2004-Sep
2004-Aug
2004-Jul
Other links:
Swing and the City - Lindy Hop in Munich