Naiko Explains Two Serious PHP Flaws and the Overnight Patch Rush on Morning Stream

INDEPENDENT — Naiko devoted most of the Thursday edition of his weekday morning radio-style stream to a security problem affecting PHP, a programming language behind a large share of the world’s websites. He said he is not an engineer and had read up on the matter, and he asked listeners to share the stream so people who had not followed the news would understand it.

He compared PHP to the plumbing and wiring inside a building, the layer that keeps a site running out of view, and said roughly 70 percent of websites worldwide use it. Two serious vulnerabilities had been found, he said, each rated 9.2 on a 10-point danger scale. Vulnerabilities themselves are common, he noted, and are normally found, patched and announced together. This time, he said, a video showing how to exploit the holes had been published before a repaired version existed.

“To all the engineers around the world, thank you for your hard work.” — Naiko, on the companies that updated overnight

That forced an emergency release. Naiko said the PHP project put out a new version at 11 p.m. the night before, ahead of its plan. He explained that anyone can compare the new version with the old one to see what was fixed, which leaves sites that have not yet updated easy to attack, so companies rushed to update at once. He thanked the engineers who worked through the night. He said ordinary users can do little beyond avoiding suspicious sites for a while, and added that attacks appear to be getting more sophisticated as AI improves.

He then moved to his regular fortune-telling segment, which he said was generated with AI and suited him poorly. Viewers picked one of four colored doors, pink, blue, yellow or purple, by typing A to D in chat, and he read out a fortune for each. He closed by asking for requests through the survey form in the stream description and played a new song by a group from his own company as the send-off.

The stream drew 7 Super Chats.