Louis Nyffenegger

As an engineer, I ❤️ clever engineering.

Ruby on Rails relies on signed sessions (AES GCM). They are secure, but there is a catch: you cannot invalidate them early. You have to wait for expiry. Workarounds exist, like caching sessions you want to kill, but nothing universal.

Not sure a PHP function behaves the same on every version?

One loop:
for v in 5.4 5.6 7.0 7.4 8.0 8.1 latest; do
docker run -v $PWD:/code php:$v php /code/test.php done

Very little work for a lot more assurance.

People often ask me what the most secure programming language is... until now, I didn't have an answer!

Look at this beauty I came across while looking at recent CVEs.

You don't need much Python or code review knowledge to spot the bug, but you do need to pay close attention to the details.

Can you spot it?