{"ok":true,"nota":{"id":"760ea34d457135c0","slug":"un-usuario-divulgo-sin-querer-una-falla-de-php-antes-de-tiempo-y-pidio-760ea3","titulo":"Un usuario divulgó sin querer una falla de PHP antes de tiempo y pidió disculpas","resumen":"Un desarrollador publicó en Hacker News información sobre vulnerabilidades de ejecución remota de código en PHP antes de la fecha acordada para su divulgación coordinada. Luego se disculpó, explicando que no conocía el embargo.","fuente":"hackernews","fuenteNombre":"Hacker News","color":"#ff6600","autor":"petecooper","url":"https://news.ycombinator.com/item?id=50193416","imagen":"/hoy/portada/760ea34d457135c0","tema":"tecnologia","subtemas":["seguridad informatica","vulnerabilidades","php","divulgacion coordinada","software libre"],"entidades":["PHP","Hacker News"],"formato":"dato","entretenimiento":false,"pubTs":"2026-10-22T10:11:44.000Z","indexTs":"2026-10-22T21:54:18.823Z","hash":"eea60775861315b5b0525b67c428978c11f9caf6343dc444c55844716332b7e5","tsa":{"time":"Oct 22 21:55:49 2026 GMT","provider":"freetsa.org","sobre":"sello"},"stats":{"views":0,"likes":0,"clicks":0,"dwell":0},"tipo":"normal","registro":"hallazgo","porQueImporta":"Cuando una falla grave se hace pública antes de tiempo, miles de servidores quedan expuestos mientras los responsables intentan parchear. Esto afectó el cronograma previsto y generó trabajo extra para los equipos de seguridad. Es un recordatorio de que en software abierto una sola publicación apurada puede dejar sin protección a sitios que muchas personas usan sin saberlo.","quienFirma":"Comunidad de Hacker News (autor particular)","confianza":"divulgacion","consulta":null},"sello":{"hash":"eea60775861315b5b0525b67c428978c11f9caf6343dc444c55844716332b7e5","sello":"523f3f7cd01b27a680c9caae9ce97bdb4a3d768fe815bbc11c630aa41bac5836","beacon":{"drand":{"cadena":"8990e7a9aaed2ffed73dbd7092123d6f289930540d7651336225dc172e51b2ce","ronda":6575837,"aleatorio":"63461f681b6ee92f4c36de6febc3c3c4fe7c3906de725dea83aeab9ec81b1467","tiempo":"2026-10-22T21:55:30.000Z"},"nist":null,"noAntes":"2026-10-22T21:55:30.000Z"},"verificacion":{"drand":true,"nist":null},"tsa":{"time":"Oct 22 21:55:49 2026 GMT","provider":"freetsa.org","sobre":"sello"},"original":{"titulo":"Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.","descripcion":"I posted here about the then-upcoming PHP RCEs related to CVE-2026-109618 & CVE-2026-109619. I appreciate this has had considerable knock-on effects with the schedule for co-ordinated disclosure, and created additional workload. I am truly sorry. I take full responsibility for my actions. It was not remotely my intention to cause any of the subsequent side effects. At the time of posting, I didn't know about any embargo. My contact had told me there was no embargo, and her contact had told her the same thing. As someone who follows the 4-weekly PHP release cycle and compiles it from source, my intention was to alert others in a similar position to be aware of the importance/urgency of the up","pubDate":"Thu, 22 Oct 2026 10:11:44 +0000","url":"https://news.ycombinator.com/item?id=50193416"},"indexado":"2026-10-22T21:54:18.823Z"}}