All PHP Applications are Vulnerable

Рет қаралды 127,276

Күн бұрын

In this video I discuss a 24 year old bug in the GNU C Library (tracked as CVE-2024-2961) that can allow a threat actor to get remote code execution on virtually any PHP application that is running on a system with GlibC (pretty much every Linux Operating system and by extension most websites on the internet)
My merch is available at
based.win/
Subscribe to me on Odysee.com
odysee.com/@AlphaNerd:8
₿💰💵💲Help Support the Channel by Donating Crypto💲💵💰₿
Monero
45F2bNHVcRzXVBsvZ5giyvKGAgm6LFhMsjUUVPTEtdgJJ5SNyxzSNUmFSBR5qCCWLpjiUjYMkmZoX9b3cChNjvxR7kvh436
Bitcoin
3MMKHXPQrGHEsmdHaAGD59FWhKFGeUsAxV
Ethereum
0xeA4DA3F9BAb091Eb86921CA6E41712438f4E5079
Litecoin
MBfrxLJMuw26hbVi2MjCVDFkkExz8rYvUF

Пікірлер: 715

@mmmmmmmmmmmmbeepbeepbeep Ай бұрын

The good thing is TempleOS is still safe from all these CVEs.

@kennnnn Ай бұрын

Common divine W

@bc-cu4on Ай бұрын

As the Lord intended.

@ViaScientifica Ай бұрын

The Lord Jesus Christ Antivirus 2000 has proven to be impenetrable.

@ProDCloud Ай бұрын

Anyone can be safe if they unplug the ethernet cable.

@fatstupid9070 Ай бұрын

after jesus turned water to wine, he turned software vulnerabilities into history 🙏

@ShatteredQvartz Ай бұрын

At this point I'm just going to become Amish, that's the only way to be totally secure

@MentalOutlaw Ай бұрын

Unfortunately there's also bugs on the farm that need patching. I have to build a roll away nesting box because my chickens discovered their own eggs are tasty

@user-ci1em7go2c Ай бұрын

@@MentalOutlaw oof

@trumpetpunk42 Ай бұрын

It actually worked out pretty well for C0V1D...

@ShakaFishing Ай бұрын

@@MentalOutlaw The chicken wire patch has yet to secure against the fox no-clip exploit.

@ShatteredQvartz Ай бұрын

@@MentalOutlaw Man...

@Chief-CO Ай бұрын

Born too late for PHP vulnerabilities, born too early for PHP vulnerabilities, born just in time for PHP vulnerabilities.

@Will-uv9kx Ай бұрын

>this bug is triggered by international conversion system Personally I blame other countries for existing

@Smokkedandslammed Ай бұрын

Yeah! Let's get em!

@walrider Ай бұрын

China to be precise in this case

@werren894 Ай бұрын

including monarchy?

@jessequartey Ай бұрын

Shut up

@stavinaircaeruleum2275 Ай бұрын

Same.

@kidnamedfinger.productions Ай бұрын

April 30: Hardware RCE affecting every every single device connected to the internet.

@noodlez7101 Ай бұрын

May 1st: IRL RCE that allows you to become God.

@bsodcat Ай бұрын

Pov you are on TempleOS: 🗿

@kidnamedfinger.productions Ай бұрын

@@noodlez7101Considering the first neuralink brain implant was installed successfully, there's not much time left until RCE that allows you to literally get a botnet of living people under control.

@Mitch-xo1rd Ай бұрын

May 30, Elon musk discovers rce irl and paywalls the sun

@stevengill1736 Ай бұрын

June 1st: the singularity begins, but no one notices because they're too busy watching monkey videos on Tik Tok....

@Remigrator Ай бұрын

I code in PHP for 20 years now and I cannot remember a time when PHP was NOT vulnerable 🤣

@blb8738 Ай бұрын

Hey. Does this vulnerability require the PHP code to explicitly convert from one charset to another? So if a website just expects user input to be in UTF8 , it's safe. Just don't use mb_convert_encoding function that's enough right?

@hthring Ай бұрын

php for life bro

@marcogenovesi8570 Ай бұрын

it's a feature not a bug. Job Security

@fuki98 Ай бұрын

PHP Numero Uno

@heroslippy6666 Ай бұрын

Ayyy Perl still on the list! 0.1% we are still under the care of the old and wise monks.

@Wren1 Ай бұрын

What's more surprising is that ColdFusion still exists. Like PHP, I guess they need scripting languages that even minimum wage, computer illiterate script kiddies can copy and paste spaghetti code for.

@hotrodjones74 Ай бұрын

kzfaq.info/get/bejne/ZtB7Y9yl29DaXXk.htmlsi=n9BeRV1JsuCrxq0b

@hotrodjones74 Ай бұрын

What happened in the 80s stayed in the 80s except for Perl.

@ddlc_monika Ай бұрын

People like me use PERL I went into IT wanting a website with 15 so HTML/CSS first, later on I wanted dynamic stuff so PHP it was. Fast forward to my second job, JavaScript was still something you use precisely on websites and nowhere else, and Python was still a weird mess with shit syntax nobody trusted, I needed something to take one XML as input and shit out another one, never heard of XSLT or XPath, all I knew was PHP and Regex. PERL came in clutch, I learned enough of it in like 10 minutes and immediately it just werked for me. Never used it outside of that due to my current job not giving us sysadmin to install software but man, in my old job I even got props from the local actual programmers because most of them only did C# and were down the OOP Rabbit Hole to bad to be quickhacking little stuff. If you want to survive in the rapidly evolving tech landscape outside of FAGMAN you'll be surprised how much legacy shit you will inevitably find, how useful powerful text handling can be and how very much in demand older stuff still is, because all the systems in most bigger companies are a legacy crap festival. If you hate learning a new framework every week, go into finance, banking, aviation or traffic control.

@heroslippy6666 Ай бұрын

@@hotrodjones74 Is this encryption? No its a new perl script I've been working on

@Hepad_ Ай бұрын

Don't care, still using vulnerable software for my critical operations.

@carnivorebear6582 Ай бұрын

Patches are for cowards

@vaisakhkm783 Ай бұрын

🙃 let me check, give me your ip

@theblankuser Ай бұрын

Hell yeah

@DonVigaDeFierro Ай бұрын

You guys are silly, they're gonna be looking for SECURE data!

@SIMULATAN Ай бұрын

No risk no fun

@SGresponse Ай бұрын

If it's a common LAMP vulnerability, then I bet you there's gonna be a no-brain-to-use script to do the hack 1 day after the talk goes live and a crawler 3 hours afterwards scrounging for visibile servers that are not updated and it will find MILLIONS of servers to up-root and there might even be a botnet fight on the servers when one bot de-admins the other in a back-and-forth escalation.

@wereisaly Ай бұрын

Im hyped

@rnts08 Ай бұрын

The dead internet is real 😂

@nnnik3595 Ай бұрын

Sure hope that updating all these package update I did on all our dockers and vms updated to the new glibc version.

@SquaresToOvals Ай бұрын

War has become a series of proxy battles fought by AI

@ET_AYY_LMAO Ай бұрын

Not at all, read the CVE. its a 4 byte overflow, when using iconv with a specific chinese encoding that is NEVER used in the west. Also why would the end user be in control of the encoding format for iconv? Realistically that would never happen, unless the site is a PHP sandbox.

@K0sm Ай бұрын

I love to wake up to an email of the french public administration warning me that they are too stupid to practice good opsec and now my social security number, name , email and so on are for sale.

@rusi6219 Ай бұрын

I mean your president is a gay who "married" a man who molested him as a child so no wonder

@bosch5303 Ай бұрын

I work in french medical sector and most of it relies on outdated and insecure technologies from around 2000s :)

@alainportant6412 Ай бұрын

why didnt I get one

@charlesp.8555 Ай бұрын

I clicked on the link in that email to "read the best practices to protect myself". You have to select which case applies to you but "absolute incompétence from the administration" isn't an option.

@fuki98 Ай бұрын

Didn't this also happen to Guatemala or something? Scary

@charautreal Ай бұрын

Can we not have big software vulnerabilities... for 5 damn minutes?!

@futuza Ай бұрын

Gotta stop writing code then

@MissiFull Ай бұрын

@stevengill1736 Ай бұрын

Welcome to the singularity...

@AttacMage Ай бұрын

I'll go add some unsafe eval() queries to my python code rq. just for you :)

@Necessarius Ай бұрын

Welcome to our job; we all make code vulnerable. We just don't know when or with what language, but it could certainly be any of them.

@CGoody564 Ай бұрын

Questioning the open-source model because bugs are actually being found is odd to me... That is the additional public scrutiny doing exactly what it's supposed to do. You know if these bugs weren't found, they'd still be there... You wanna find out the hard way, or do you wanna find out during "security month" as a part of a semi-collaborative effort to make shit better?

@MrFram Ай бұрын

Even if you are to take FOSS CVEs as indicating a problem, we just had a windows issue like 2 weeks ago and instead of MS fixing it, the programming languages had to add workarounds to avoid triggering it, which tells you all you need to know

@Binxalot Ай бұрын

seriously, this is the entire point of open source software and why it's so important for community involvement in software development. When it comes to Apple/MS your system gets hacked and you'll never know or know why.

@jesusmods1 Ай бұрын

Is like that movie where a kid deciphers some kind of goverment code and instead of making a better encoding algorithm they try to kill the child haha

@kazwalker764 Ай бұрын

Alpine is commonly used in production, most shops using container based deployments that I've seen use it, most of those using k8s. It's also the default base image for Phoenix/Elixir apps.

@bloodonthesnow Ай бұрын

can confirm - using it in containers on prod for years

@xanderplayz3446 Ай бұрын

And the default base Docker image of Gitea instances.

@pcap8810 Ай бұрын

I've been doing this for 4 or 5 years at least now

@Kabodanki Ай бұрын

Except with solved DNS issues (ndots), alpine is very good. Widely used in production

@luszczi Ай бұрын

Blue teams everywhere having a really shitty month.

@rideroftheforce5245 Ай бұрын

Red teams everywhere are about to have a field day

@alonsoACR Ай бұрын

@@rideroftheforce5245 what does this mean

@rideroftheforce5245 Ай бұрын

@@alonsoACR I was just saying that red team pen testers are going to have a lot of successful attacks on their clients in the near future with this vulnerability

@a__duck Ай бұрын

I am so glad I can't do anything about this!

@jwmcq Ай бұрын

Alpine Linux is used in production a lot more than you'd think. You wouldn't run a server on it, but the small size makes it great for init / sidecar containers in a kubernetes workload, for instance.

@illsmackudown Ай бұрын

How asinine and embarrassing 🤣

@vito2320 Ай бұрын

You are born to deploy kubernetess clusters. Lol

@Deliverygirl Ай бұрын

@@vito2320 It's the sysadmin equivalent of living in the pod and eating the bugs, you hate to see it.

@DanteS-119 Ай бұрын

Awwww :/ alpine is great for this stuff lol

@schlickit628 19 күн бұрын

I don’t understand the negative responses to this. Less code means less surface area for vulnerabilities. It’s not just glibc, openrc and ash instead of systemd and bash. When you all set up a server do you need user services or array functionality in your shell, because I sure don’t.

@rusi6219 Ай бұрын

Boy oh boy if only the entire web was rewritten in rust am i right sisters?

@100c0c Ай бұрын

😂

@Alexagrigorieff Ай бұрын

With the runtime which calls this glibc function?

@flamingspinach Ай бұрын

The escape sequences you talk about around 4:09 are not for indicating that the computer should convert to this character set, it's actually that the character set is constructed out of multiple swappable sub-charsets (called "planes") and the escape sequences are used to indicate that at that point in the text, the encoding is jumping from the current plane to a different one. See the wikipedia article on "ISO/IEC_2022", subsection "Other 7-bit versions", for more info.

@alainportant6412 Ай бұрын

nerd

@gibrains Ай бұрын

What's good about it is that it's open source. When issues arise, we address them. It's completely open-something you can't rely on in proprietary modes. You don't even know if their software is vulnerable or not. Even when they update, you don't know what they're actually updating. #windows.

@nectronomeflower4895 Ай бұрын

Windows isn’t actually vulnerable to this bug lmao

@QuantumKurator Ай бұрын

Best functional backdrop I have seen on youtube

@ButtKickington Ай бұрын

Oh boy, I thought for sure this would be a headache for me. Luckily our code is too spaghetti to handle multiple character sets.

Ай бұрын

Rewrite Wordpress in Rust

@MentalOutlaw Ай бұрын

Lol well that would save me from the difficult journey of rewriting my eCommerce site in Rust.

@kidnamedfinger.productions Ай бұрын

@@MentalOutlaw We need to fork rust to make the compiler punch devs into the balls every time they make a mistake, so that way they won't code any bugs even when writing in other languages (they most likely won't code at all tho)

@spl45hz Ай бұрын

I will do that if you promise to port 30% of plugins

@kidnamedfinger.productions Ай бұрын

@@_________________404 Lemme tell you something, almost every compiled programming language uses LLVM as it's backend mostly because it's good and let's you bind your code with other programming languages that use LLVM too. Rust has a compiler, but a frontend which checks your code, LLVM does the dirty work. It's not even about rust, I don't know why would you even comment that it's just stupid.

@kidnamedfinger.productions Ай бұрын

@@_________________404 What's so good do you find about C++ compared to rust tho? Have you ever tried them or you just made up your opinion from some KZfaq video and now yelling it everywhere?

@Rodelero Ай бұрын

Your thumbnails bring joy to my heart Mental Outlaw😂!

@holetarget4925 Ай бұрын

IMAGINE HOW MAY WP SITE HAD BEEN BACKDOORED INT HE LAST 24 YEARS

@MrCobalt Ай бұрын

Trust me, WordPress sites didn't need this bug to be considered insecure. WordPress has consistently been a security nightmare.

@iiisaac1312 Ай бұрын

They deserve it for using WP.

@SGresponse Ай бұрын

Imagine how many will be after the talk. You can't expect them to UPDATE their servers? I mean that entails actually hiring a tech to do it! Expensive stuff.

@socialkruption Ай бұрын

@@iiisaac1312 Wordpress bro here, I enjoy my lambo, don't mad.

@holetarget4925 Ай бұрын

@@SGresponse 70% of the web is build on Php….this a total car crash

@Alrauna Ай бұрын

Oh boy, update time again

@WarkWarbly Ай бұрын

I remember when there was a bug that had existed in the sudo framework that had existed for quite some time. Not as long as this bug, but still there for years.

@bigmango202 Ай бұрын

Can't wait until I get confirmation that my house has massive vulnerabilities and there's people living in my walla

@Marty234 Ай бұрын

Great video brother!

@thefloridaman6527 Ай бұрын

I installed a fixed version of glibc for Debian buster for our website host right away 😄 Thanks

@polarfamily6222 Ай бұрын

LAMP has been somewhat vulnerable in one way or another for quite a while now.

@kidnamedfinger.productions Ай бұрын

I don't get why anybody would use php in 2024, go is a much better alternative for the backend, for frontend just use svelte.

@jazzjohnson5260 Ай бұрын

More vulnerabilities this month very fun

@minefacex Ай бұрын

Each time a PHP CVE drops PHP-chan appears in my feed.

@MonochromeWench Ай бұрын

Web servers should just be able to say no, I only support utf8/utf16 and get rid of all the character set conversion nonsense server side, but the webservers are accommodating to what the browser asks for even if it far from appropriate for the site's content.

@ethanbloom114 Ай бұрын

Your videos are so interesting

@A1A. Ай бұрын

New kenny upload!!🎉 ✨You are our favourite/based/red pilled honey pot chanel ✨😝

@veritas7010 Ай бұрын

alpine is used often in prod, it's a lightweight base image for docker

@TheTubejunky Ай бұрын

PHP perl was some of the first script used for phishing attacks. Good to see it's still knocking at system doors

@Ginfidel Ай бұрын

Moon runes? Of course. -Gandalf

@bunnicula3221 Ай бұрын

Counter argument: All applications are vulnerable. Software security keeps honest people away, it ain't gonna last forever against skilled/dedicated hackers.

@Deniil2000 Ай бұрын

No, theoretically, software can be impenetrable

@tishaak2800 Ай бұрын

@@Deniil2000but is in practicallity nearly impossible Doubt on would perfectly set everything up down to binary code and Electric components And even so, all it takes is a rare case of the suns radiation conviently changing that one 1/0 to mess it all up

@alexiosangel2221 Ай бұрын

he never sleeps, only edits

@twidoh9128 Ай бұрын

Thanks Jason Tatum

@whamer100 Ай бұрын

Cant wait for the first ever 11/10 to be announced for the first time and its that someone found a way to just take over the universe because someone's toaster had an exposed copper cable into the matrix

@zhon5311 Ай бұрын

2024 is the year of the security vulnerabilities

@paprukas Ай бұрын

114/366 year is unlocked

@finlanderxx Ай бұрын

Year of obscure vulnerabilities. Like who converts characters from UCS4 to ISO-2022-CN-EXT or haves unstable packages in production or allowing everybody running CLI commands remotely

@mawnkey Ай бұрын

I just wanna know who hooked ChatGPT up to metasploit and told it to go ham.

@AmosThacker-Gwaltney-hy7tc Ай бұрын

I could be wrong but cursory Google searching shows that andres freund works for Microsoft and posgresql, meaning he contributes to open source but works under proprietary software leadershit?

@sleepysapphire2349 Ай бұрын

That anime thumbnail caught my eye. I thought this was going to be a vtuber's video.

@robertdeckard2136 Ай бұрын

Gentoo can optionally be set up with musl instead of glibc. Not sure how often this is done in practice however. I did my first Gentoo install only a few months ago.

@BanglaBitTheAi Ай бұрын

Damn this year is wild

@ravenecho2410 Ай бұрын

Alpine is standard like min linux distro for docker and k8s?

@dnoordink Ай бұрын

"Much quicker" 24 years later... good one!

@SerenadeURA Ай бұрын

unless my reading comprehension is poor (a possibility) I believe this was discovered 24 years ago and only found to be truly exploitable 24 years later.

@dnoordink Ай бұрын

@@anon8510 So your conclusion is he didn't get to the point quick enough? Attention is a rare commodity these days.

@dnoordink Ай бұрын

@@anon8510 Also good non-committal username. Choose better.

@dnoordink Ай бұрын

@@anon8510 because you care about my watching a video to the end

@dnoordink Ай бұрын

@@anon8510 how short is your username? this is getting ridiculous. I made a quick funny comment on a video I didn't want to watch to the end, because I'm a developer that doesn't care about a lot of open source bullshit... and this continues. Game over.

@Xnoob545 Ай бұрын

I read the title and my reaction was: "Well of course they are, this is PHP"

@Stoney_Eagle Ай бұрын

Oh boy am I glad to be running alpine in docker 😮

@dfgdfg_ Ай бұрын

Mental Outlaw, put some posters up, it'll make your space more cozy!

@deidara_8598 Ай бұрын

This is the pinnacle of PIKE MATCHBOX

@StarryX0 Ай бұрын

7:15 To be fair, the xz backdoor wouldn’t be discovered in windows for a long time, but it would probably wouldn’t be introduced from the first place.

@streettrialsandstuff Ай бұрын

It's been like 10-15 years since last time I heard someone mention LAMP until today.

@moioyoyo848 Ай бұрын

What a surprise

@apoc4223 Ай бұрын

I had to check if there was any new information on the bug, but no. So far we don't actually know if it affects all php applications, where did you get that from? The post you cited even said it's application specific.

@elexbeats Ай бұрын

I think it will be a great content if you show a way to encrypt ur harddrive so even people who has physical acces to it can’t find the recovery keys to decrypt

@ShatteredQvartz Ай бұрын

Also, wtf with the Italian bots lmao

@zyxwv Ай бұрын

Okay I'm new to all this (been coding with a goal to get gud for about a year or two), is this many RCE executions in such a short amount of time this common? (the xz one, this php one, that one discovered in rust, etc)

@JRSofty Ай бұрын

It would be nice to know if it is possible to mitigate the problem at the PHP level when you don't control the underlying server and cannot update the linux. Yet everyone seems to be talking about this Critical CVE which ramps up the stress, but there doesn't seem to be a clear path for mitigation.

@V3DT 29 күн бұрын

Even if you could prevent it in your PHP code, in most cases when have no control over the software on the host your using shared hosting. So even if you could prevent it in your code, everyone else running a site on the server would also have to make sure their code prevents it. Any decent company offering hosting should be keeping an eye out for exploits & updating the software ASAP when patches come out for severe bugs.

@Sypaka Ай бұрын

Days to next CVE: 0

@karpfenboy Ай бұрын

what makes you say virtually any PHP application? From what i can tell an application needs to take untrusted user input in the iconv function.

@sethjets4687 Ай бұрын

Maybe... just maybe that is the way nemesis market got seized?

@slateslavens Ай бұрын

_"Little Bobby Tables"_ -XKCD

@FPVogel Ай бұрын

started the video watched half-way through, updated and rebooted all servers at 3am there we go not even billable hours :(

@GydoMans Ай бұрын

nice acoustics >.>

@pierrejoye Ай бұрын

as a fix, in case .40 is not available. One can disable these encodings as well. Still best to update glibc if possible.

@Iceman259 Ай бұрын

Hot bug summer

@hthring Ай бұрын

also open source is more likely to have bugs found because people can analyse the code looking for vulnerabilities

@nothingtoseehere449 Ай бұрын

is it suspected that a PHP vulnerability is why nemesis market was busted

@thelonesalt1473 Ай бұрын

What if your running the WP docker container, would i need to wait for an updated docker image from the developers so that the glibc that the docker image is using gets updated?

@amr3162 Ай бұрын

2:08 alpine is not used in production? it's one of the most used distros used for docker containers

@nathanoher4865 Ай бұрын

Perhaps that’s what he meant? Maybe he means the hosting servers not containers

@levvayner4509 Ай бұрын

The known bugs is a SOP. Software is released with a list of known issues, that is developed as more people provide feedback. Teams will ensure any critical issues are fixed, but non-critical issues - especially ones that have workarounds, are often released.

@mattm3023 Ай бұрын

Actually paused the video and updated, though unattended-upgrades already took care of it. If youre using Ubuntu 22 then libc6 2.35-0ubuntu3.7 (check with ldd --version) is fixed despite being "under" 2.39.

@MentalOutlaw Ай бұрын

Same thing happened on based.win backend, confirmed it this weekend when I saw the open wall post

@mattm3023 Ай бұрын

@@MentalOutlaw Yeah might be a good video, ensuring security updates are on auto. Also, I'm kind of embarrassed how much I use LAMP but man its so fast to deploy

@beskamir5977 Ай бұрын

April: Month of security vulnerabilities. I shudder to think what will be found on April 30th.

@rangeispow Ай бұрын

Should I be concerned about the fact that KZfaq app on my TV has suddenly changed to the Chinese character set?

@F_Around_and_find_out Ай бұрын

Many vulnerabilities being discovered lately is a good thing, because they are being seen, they are being fixed, and best of all you as the common user can know all of this. Proprietary software? Unless the people there do a press release, you won't know a damn thing. And there is a chance that there are less eyes to discover weird activities in the code too.

@SteveWray Ай бұрын

Interesting that the ISO-2022-CN-EXT character set is mainly used for traditional Chinese eg Taiwan

@Gamesational1 Ай бұрын

Crazy. I need to update php

@adamterrence Ай бұрын

thank you jayson tatum

@by010 Ай бұрын

I started my dev life as LAMP stack dev. Still returning to LAMP for small gigs every now and then

@isheamongus811 Ай бұрын

WAMP is sometimes used in testing.

@ChiEKKUsama Ай бұрын

Chinese characters? Again? I thought we already solved this problem with wchar and other wide character types

@xparadoxical69 Ай бұрын

Php didn't catch up

@rezwhap Ай бұрын

We fixed it with UTF-8 being the de facto web encoding. But… legacy stuff.

@IvanStamenkovicSeemsIndie Ай бұрын

Oh we will, Grafana exploit just landed..it's a fun month...

@dyto2287 Ай бұрын

We were discussing pentest with one company on our system and some part of your system was still in PHP. I remember them saying - "We don't pentest PHP because it's insecure by default. Get rid of it first" 😂

@GhiveciuMarian Ай бұрын

yeah, sure ... what is not secure about php? is really weird that most of todays servers are powered by php, and WP on top of php, yet they do not get hacked left and right

@dyto2287 Ай бұрын

@@GhiveciuMarian ...mOsT sErVeRs PoWeRed By pHp... 🥴 Having higher quantity of crap WP deployments doesn't mean that it's used more to serve actual http traffic.

@JeehanAhmad Ай бұрын

What about the chair you are sitting on, how is it?

@davorfister Ай бұрын

nicee another one

@Cryogenicbanana Ай бұрын

So am I in the clear if I have a fresh install of linux mint with no extra apps other than discord and steam, I’m new to this shindig.

@ST-actual Ай бұрын

Lmao I feel attacked by the lamp stack part

@isheamongus811 Ай бұрын

7:30 one could notice it with low level system wide debugging but it would be likely only if someone was reverse engineering.

@pierrejoye Ай бұрын

for the record, php on windows runs very well. Perform well too. it is still more common to run on Linux, not because php does not work on windows, but less portable user apps. But most framework and as long as conventions are respected, zero issues.