I attended a session this morning called " PHP Taint Tool: It Ain't a Parser " by Luke Welling. Luke introduced a tool he's working on at OmniTI that is designed to assist in sniffing out where the potential for untrusted input is handled. From the session description: ... You want to see where untrusted input can propagate taint within the application. In complex logic that might mean chasing many possible execution paths. Using an automatic tool to try to follow these paths without running

Hey y'all. I've got some work goin' on that I sure could use a few hands that were real PHP savvy. I'm looking for some short-term and some mid-term consultants to do some experimental work with PHP applications on Windows. I have need for some local (Redmond) and some can work from remote. If you have some real fine PHP skills, including experience with databases, and have a track record of producing results, I'd be happy to hear from you. Tell me... are you up to it? Send me a mail: garretts at

I got to my office this morning, and found that gettin' off the horse too quickly often means steppin' in a cow pie. Ah well, like my cousin Teddy used to say : “ Lettin' the cat outta the bag is a whole lot easier than puttin' it back.” ... and he'd know... poor old Teddy got thirty some stiches from the cat when he tried. So, when I said " Building an Open Source MVP Program " on Friday, I had meant of course, that I hadn't done so yet (hence the use of the future tense 'building' , as opposed

Howdy! I've recently moved from the Federated Identity group into the Open Source Software Labs at Microsoft. I've been rather busy of late, finishing up things for the Identity folks, and getting things started over here in the OSSL, so I apologize for the silence. Many folks have been askin' what this is all about, so I'll try to answer the common questions right now. What's this new job? I'm now the Open Source Community Lead here at Microsoft. I'm responsible for building and connecting an Open