Hacker News Reader

For a more serious answer though, they just got acquired. Definitely a possibility that they were holding back on announcing bugs out of fear of harming the acquisition.

If php_info is really as dangerous as this article makes it out to be these ‘vulnerabilities’ would be rather easy to scan for.

I think it’s time for a debate though what information is considered secret and what isn’t, and have php_info not reveal the information that is secret and the applications not store their secrets in a location that is not secret.

Disgruntled CIA employee dumping their backdoors.