You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
Btw, someone joked about http://php.net having this as the correct solution, and, well. But "knowing better than http://php.net " is definitely a prerequisite to be in the security business writing PHP. Or just don't write PHP.https://twitter.com/marcan42/status/1089238169839489025 …
OMG IT'S STILL BROKEN. THIS IS HOW THEY'RE SANITIZING URLS FOR INSERTING INTO SQL QUERIES $ echo "<?php echo filter_var('http://inject/\'', FILTER_VALIDATE_URL);" | php http://inject/' AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Okay, get this. The fix in question? It was co-authored by 5 Yubico employees and merged (and hopefully reviewed) by a 6th. At least 6 Yubico employees do not know about prepared statements. https://github.com/Yubico/yubikey-val/pull/59/commits/d0e4db3245deb5ce0c8d7d26069c78071a140286 … I am in shock.
Gotta laugh at these things...
Inb4 next fix is client side validation
"Yubico sets new world standards"
Nice rage thread. I mean, it’s PHP, mate 
Jokes aside, yes you might want to look at alternative products
i don't even code in php that much and looks loose/hacky/kludgey as all get-out
Your tweets are quite toxic. The attitude displyed in this thread is the reason why we cannot have a possitive and open relationship with vendors. 
There is a minimum set of expectations from vendors, which was thoroughly violated here. I'm all for positivity, especially when it comes to teaching security to those who are not in the industry... But if you *sell security* and do this, there is no excuse.
@threadreaderapp kindly unroll
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
