Re: [PHP] Re: Good and free encoder for PHP5
Hello, on 12/16/2004 02:10 AM Matthew Weier O'Phinney said the following: You *do* make valid points about making needless upgrade -- if no security vulnerabilities exist, the application works fine, and you don't need features from the new version, there really is no reason to upgrade. But when a security vulnerability *does* exist, and it *could* affect your application, you've got another issue entirely on your hands. The trick is learning to distinguish between the two. You are still missing the point. A version may have vulnerabilities that affect functions that you do not use. Upgrading in that case is pointless and risky because newer versions have new bugs. Go and read back PHP version history and notice that were times when a vulnerability fixing upgrade introduced new vulnerabilities. If the old vulnerability was not affection your application you should not have upgrade. Another point is that, if there is a patch available, apply the patch instead of upgrading to a new version. That is a common practice of high quality control Linux distributions like SuSE. Often when a vulnerability is reported, they provide a security fix that just applies the patch. This way you do not risk to break other things or be affected by new vulnerabilities. -- Regards, Manuel Lemos PHP Classes - Free ready to use OOP components written in PHP http://www.phpclasses.org/ PHP Reviews - Reviews of PHP books and other products http://www.phpclasses.org/reviews/ Metastorage - Data object relational mapping layer generator http://www.meta-language.net/metastorage.html -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: Good and free encoder for PHP5
On Thu, 16 Dec 2004 01:57:42 -0200, Manuel Lemos <[EMAIL PROTECTED]> wrote: > The point is that old software versions that work on old environment > versions do not need you to upgrade the environment version even the > vendor deprecates the old version. Wrong. Security issues force upgrades. Operating systems being depricated forces upgrades. > While you think that newer versions > will not have old bugs that probably were not affecting you, chances are > that newer versions have newer bugs that may break your applications, > especially if you upgrade right after those new versions are released. I never said anything of the sort. > What I am trying to tell you is that you need to use your brain Yeah, I probably never use my brain, thanks for that. -- Greg Donald Zend Certified Engineer http://gdconsultants.com/ http://destiney.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: Good and free encoder for PHP5
Hello, on 12/16/2004 01:27 AM Greg Donald said the following: I have all kinds of old software that doesn't work anymore. That is because you changed the environment on which it was working. Exactly my point. I don't control when M$ depricates their operating systems. I don't control when my favorite Linux distro upgrades their glibc. You have to upgrade at some point or be vulnerable to the security issues that follow. >>The point is that if you do not need to use the latest version, just >>stick to the one you have and works for you. > > Well, I'm not gonna run windows 95 just to play Afterlife. The point is that old software versions that work on old environment versions do not need you to upgrade the environment version even the vendor deprecates the old version. While you think that newer versions will not have old bugs that probably were not affecting you, chances are that newer versions have newer bugs that may break your applications, especially if you upgrade right after those new versions are released. What I am trying to tell you is that you need to use your brain before you make an upgrade, eventually leaving a reasonable amount of time since it was released because most bugs are only discovered when early adopters break their faces trying the just released versions. In the case of PHP 5, I do not recommend jumping to it before 1 year after 5.0.0 release. Then your upgrade risk will be much smaller. -- Regards, Manuel Lemos PHP Classes - Free ready to use OOP components written in PHP http://www.phpclasses.org/ PHP Reviews - Reviews of PHP books and other products http://www.phpclasses.org/reviews/ Metastorage - Data object relational mapping layer generator http://www.meta-language.net/metastorage.html -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: Good and free encoder for PHP5
Well, you could try XP's "Compatibility Mode", I think my girlfriend got Afterlife to run under XP doing that. She got it to run somehow..haha.. because we just found a copy of Afterlife for like $1 somewhere and she picked it up. Or, if you happen to be blessed with VMWare, there's always that. I've used VMWare to succesfully set up DOS 6.22 and some games that didn't work under DOSBox and Windows 95 to run some games that Win98 and XP didn't like so much. So there's always options.. if you have time and/or money :)You might be able to use Wine or something to run an older version of Windows to get Afterlife to work as well. In general, yes.. software gets old and rusty on the new OS's... but if you're ingenuity is adequate, you can figure out a way to have your cake and eat it too. Where there's a will (and a search engine and maybe $200 for VMWare) there's an emulation of some kind. -TG *** new email address [EMAIL PROTECTED] *** old email address [EMAIL PROTECTED] YAY CHAPTER 11! = = = Original message = = = On Wed, 15 Dec 2004 22:38:16 -0200, Manuel Lemos <[EMAIL PROTECTED]> wrote: > > I have all kinds of old software that doesn't work anymore. > > That is because you changed the environment on which it was working. Exactly my point. I don't control when M$ depricates their operating systems. I don't control when my favorite Linux distro upgrades their glibc. You have to upgrade at some point or be vulnerable to the security issues that follow. > The point is that if you do not need to use the latest version, just > stick to the one you have and works for you. Well, I'm not gonna run windows 95 just to play Afterlife. -- Greg Donald Zend Certified Engineer http://gdconsultants.com/ http://destiney.com/ ___ Sent by ePrompter, the premier email notification software. Free download at http://www.ePrompter.com. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: Good and free encoder for PHP5
* Manuel Lemos <[EMAIL PROTECTED]>: > Hello, > > on 12/16/2004 01:27 AM Greg Donald said the following: > > > >I have all kinds of old software that doesn't work anymore. > > >That is because you changed the environment on which it was working. > > > > Exactly my point. I don't control when M$ depricates their operating > > systems. I don't control when my favorite Linux distro upgrades their > > glibc. You have to upgrade at some point or be vulnerable to the > > security issues that follow. > > > >The point is that if you do not need to use the latest version, just > > >stick to the one you have and works for you. > > > > Well, I'm not gonna run windows 95 just to play Afterlife. > > The point is that old software versions that work on old environment > versions do not need you to upgrade the environment version even the > vendor deprecates the old version. While you think that newer versions > will not have old bugs that probably were not affecting you, chances are > that newer versions have newer bugs that may break your applications, > especially if you upgrade right after those new versions are released. Greg's point is that sometimes you *must* upgrade because the "old", possibly unnoticed bugs create may security vulnerabilities that you can't live with. If a library your application depends on (and that library could be PHP) has a security flaw that could allow permission escalation, for instance, and a patch exists for it, you'd be crazy or stupid not to perform the upgrade. If the upgrade breaks the application that depends on it... well, that's why we're coding in PHP, right? So that we have the freedom to fix these things, instead of relying on vendors. (Man, I love OSS!) You *do* make valid points about making needless upgrade -- if no security vulnerabilities exist, the application works fine, and you don't need features from the new version, there really is no reason to upgrade. But when a security vulnerability *does* exist, and it *could* affect your application, you've got another issue entirely on your hands. The trick is learning to distinguish between the two. -- Matthew Weier O'Phinney | mailto:[EMAIL PROTECTED] Webmaster and IT Specialist | http://www.garden.org National Gardening Association| http://www.kidsgardening.com 802-863-5251 x156 | http://nationalgardenmonth.org -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: Good and free encoder for PHP5
On Wed, 15 Dec 2004 22:38:16 -0200, Manuel Lemos <[EMAIL PROTECTED]> wrote: > > I have all kinds of old software that doesn't work anymore. > > That is because you changed the environment on which it was working. Exactly my point. I don't control when M$ depricates their operating systems. I don't control when my favorite Linux distro upgrades their glibc. You have to upgrade at some point or be vulnerable to the security issues that follow. > The point is that if you do not need to use the latest version, just > stick to the one you have and works for you. Well, I'm not gonna run windows 95 just to play Afterlife. -- Greg Donald Zend Certified Engineer http://gdconsultants.com/ http://destiney.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: Good and free encoder for PHP5
Hello, on 12/15/2004 08:35 PM Greg Donald said the following: Software it is not like people, it does not stop working with age. I have all kinds of old software that doesn't work anymore. That is because you changed the environment on which it was working. The problem is always with people, not with software. Some people feel that they need to ride the latest wave and always upgrade to the latest versions as soon as they are released. The reality is that new versions have new bugs and there is no guaranteed that new bugs are not worse than the bugs in old versions. The point is that if you do not need to use the latest version, just stick to the one you have and works for you. It will probably take 1 year or so for PHP 5 to be as bug free as the current PHP 4, so my advice is to not upgrade unless you really need something fundamental only provided by PHP 5. -- Regards, Manuel Lemos PHP Classes - Free ready to use OOP components written in PHP http://www.phpclasses.org/ PHP Reviews - Reviews of PHP books and other products http://www.phpclasses.org/reviews/ Metastorage - Data object relational mapping layer generator http://www.meta-language.net/metastorage.html -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: Good and free encoder for PHP5
Mário Gamito wrote: Hi Manuel, Yes, Turck works with PHP5. My question is: if the last version was released a year ago, how much can i trust it ? BTW, how good is Truck's algorithm and how hard it is to reverse engineer the code ? Encoding generally does not protect you from reverse engineering. Laws do. -- Raditha Dissanayake. -- http://www.radinks.com/print/card-designer/ | Card Designer Applet http://www.radinks.com/upload/ | Drag and Drop Upload -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: Good and free encoder for PHP5
Mário gamito wrote: Hi Manuel, Yes, Turck works with PHP5. My question is: if the last version was released a year ago, how much can i trust it ? IIRC the main developer for Turck was hired by Zend... -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: Good and free encoder for PHP5
On Wed, 15 Dec 2004 20:12:54 -0200, Manuel Lemos <[EMAIL PROTECTED]> wrote: > Software it is not like people, it does not stop working with age. I have all kinds of old software that doesn't work anymore. -- Greg Donald Zend Certified Engineer http://gdconsultants.com/ http://destiney.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: Good and free encoder for PHP5
Hi Manuel, Yes, Turck works with PHP5. My question is: if the last version was released a year ago, how much can i trust it ? BTW, how good is Truck's algorithm and how hard it is to reverse engineer the code ? Abraço aí para o Brasil, meu. A curtir o sol e as macacas no calçadão :) Warm Regards, Mário Gamito Manuel Lemos wrote: Hello, Mário gamito said the following on 12/14/2004 08:51 AM: Does anyone around here knows a *good* and *free* encoder for PHP5 ? I used to run Turck, but it seems that somehow it has been discontinued. (At least, the last release occured about a year ago). Did it stop working? My Turck copy still works. ;-) -- Mário Gamito Administração de sistemas e desenvolvimento Netual - Multimédia e Telecomunicações, Lda. Rua João Afonso, Nº1 3800-198 Aveiro - Portugal Tel. +351 234 371 431 / Fax. +351 234 371 438 E-mail: [EMAIL PROTECTED] www.netual.pt -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: Good and free encoder for PHP5
Hello, on 12/15/2004 07:32 PM Mário gamito said the following: Yes, Turck works with PHP5. My question is: if the last version was released a year ago, how much can i trust it ? Software it is not like people, it does not stop working with age. BTW, how good is Truck's algorithm and how hard it is to reverse engineer the code ? It is not hard because you can always rebuild the original code for Zend opcodes. Turck just serialize Zend opcodes to files. I have not seen any reverse engineer software but it should not be hard. I just use Turck for caching. If you real want to use compile PHP applications, forget encoders (commercial included). Use a real PHP compiler like Roadsend. That is real PHP code protection. http://www.roadsend.com/ Abraço aí para o Brasil, meu. A curtir o sol e as macacas no calçadão :) :-) O Brasil é grande e o calçadão do Rio de Janeiro fica a muitas centenas de kilometros daqui. Hoje em dia nem com colete à prova de bala lá poria os pés. As autoridades do Rio de Janeiro são impotentes para deter a criminalidade na cidade e até mesmo nas praias. Engraçado é há quem se admire que o turismo para o Rio tem caído muito. Basta ver os jornais para ver a quantidade de turistas saqueados e baleados mesmo com cameras de vigilancia a filmar tudo. Resumindo, não conheço essas macacas do calçadão. > -- Regards, Manuel Lemos PHP Classes - Free ready to use OOP components written in PHP http://www.phpclasses.org/ PHP Reviews - Reviews of PHP books and other products http://www.phpclasses.org/reviews/ Metastorage - Data object relational mapping layer generator http://www.meta-language.net/metastorage.html -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP] Re: Good and free encoder for PHP5
Oh yeah but probably the problem is that it wasn't updated in order to work with PHP 5. Or does it does? Teddy - Original Message - From: "Manuel Lemos" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 15, 2004 1:16 AM Subject: [PHP] Re: Good and free encoder for PHP5 Hello, Mário gamito said the following on 12/14/2004 08:51 AM: > Does anyone around here knows a *good* and *free* encoder for PHP5 ? > I used to run Turck, but it seems that somehow it has been discontinued. > (At least, the last release occured about a year ago). Did it stop working? My Turck copy still works. ;-) -- -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
