+++
date    = "2026-10-25T20:09:29+00:00"
lastmod = "2026-10-25T20:09:29+00:00"
tags    = [ "web" ]
+++

Gotta say, my anti-{{< abbr seo "search engine optimization" >}} game is good.
How dangerous was [`php2shell`](https://en.wikipedia.org/wiki/PHP2Shell)? Murphy's law dangerous.
[Patch](https://www.php.net/archive/2026.php#2026-10-21-5) and [don't relax](https://www.php.net/archive/2026.php#2026-10-23-1)?

An old hack also once said that ya can't hack what ain't there. Trip wiring
software on mere mentions/intrusiveness just might be an
[optimal tactic](https://en.wikipedia.org/w/index.php?title=PHP2Shell&oldid=1381683436#:~:text=dating%20back%20to%2017%20October%202026)
nowadays.

Personally, I think [XZ utils' backdoor fiasco](https://en.wikipedia.org/wiki/XZ_Utils_backdoor)
really phoned home the realization of {{< abbr OSS "open-source software" >}} as minimally funded Swiss cheese.
Will [defense-in-depth tricks](https://en.wikipedia.org/wiki/Defense_in_depth_%28computing%29#Technical)
incentively become like a natural phenomenon?