My Journey To PHP Internals - Pacific Northwest PHP 2016

Slide 1

Slide 1 text

S E P T E M B E R 1 6 T H , 2 0 1 6 JOURNEY MY CENTER TO THE OF S A M M Y K A Y E P O W E R S @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 2

Slide 2 text

SCARY! INTERNALS IS @SammyK #PNWPHP joind.in/talk/6b9c9 http://saint-max.deviantart.com

Slide 3

Slide 3 text

I don’t know C! Internals is scary! I don’t know what I’m doing!

Slide 4

Slide 4 text

BUBBLE MY 1998-2013 @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 5

Slide 5 text

LARACON 2014 NEW YORK PHP|TEK CHICAGO @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 6

Slide 6 text

PHP|TEK HACK-A-THON CONTRIBUTE TO PHP @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 7

Slide 7 text

I don’t know what I’m doing! @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 8

Slide 8 text

ELIZABETH SMITH DERICK RETHANS

Slide 9

Slide 9 text

@SammyK #PNWPHP joind.in/talk/6b9c9

Slide 10

Slide 10 text

ANTHONY FERRARA @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 11

Slide 11 text

CONTRIBUTION MY FIRST

Slide 12

Slide 12 text

this is a table… @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 13

Slide 13 text

I love tabs! this is a table… Spaces is where it’s at! I’m trying to upgrade bison I added array_column() Have you used Docker? Licensing in FOSS is important Let’s have a PGP key signing party! JavaScript is weird

Slide 14

Slide 14 text

Slide 15

Slide 15 text

TABS SPACES VS

Slide 16

Slide 16 text

OPEN SOURCE @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 17

Slide 17 text

PHP SDK FACEBOOK

Slide 18

Slide 18 text

FOSCO MAROTTO @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 19

Slide 19 text

HQ FACEBOOK @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 20

Slide 20 text

No content

Slide 21

Slide 21 text

CHANGED IT ALL THE PR THAT @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 22

Slide 22 text

No content

Slide 23

Slide 23 text

No content

Slide 24

Slide 24 text

SCOTT ARCISZEWSKI @SammyK #PNWPHP joind.in/talk/6b9c9 (AR - SIZ - ZU - SKI)

Slide 25

Slide 25 text

@SammyK #PNWPHP joind.in/talk/6b9c9

Slide 26

Slide 26 text

@SammyK #PNWPHP joind.in/talk/6b9c9

Slide 27

Slide 27 text

SCOTT’S PR INFOSEC FALLOUT == @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 28

Slide 28 text

I HAD A CHOICE @SammyK #PNWPHP joind.in/talk/6b9c9 OR

Slide 29

Slide 29 text

CSPRNG WUT? @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 30

Slide 30 text

CSPRNG WUT? @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 31

Slide 31 text

CSPRNG @SammyK #PNWPHP joind.in/talk/6b9c9 mt_rand($min, $max); rand($min, $max);

Slide 32

Slide 32 text

CSPRNG echo mt_rand(0, 42); 11

Slide 33

Slide 33 text

CSPRNG echo mt_rand(0, 42); 7

Slide 34

Slide 34 text

CSPRNG echo mt_rand(0, 42); 39

Slide 35

Slide 35 text

CSPRNG mt_srand(10); echo mt_rand(0, 42); 21

Slide 36

Slide 36 text

CSPRNG mt_srand(10); echo mt_rand(0, 42); 21

Slide 37

Slide 37 text

CSPRNG mt_srand(10); echo mt_rand(0, 42); 21

Slide 38

Slide 38 text

rand(); mt_rand(); AUTO SEEDING USING TIMESTAMP + A FEW OTHER VARIABLES @SammyK #PNWPHP joind.in/talk/6b9c9 CSPRNG

Slide 39

Slide 39 text

CSPRNG’S USE BETTER SEEDS @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 40

Slide 40 text

CSPRNG OPTIONS IN 5.x openssl_random_pseudo_bytes() mcrypt_create_iv() /dev/*random @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 41

Slide 41 text

No content

Slide 42

Slide 42 text

Why is CSPRNG so hard in PHP?

Slide 43

Slide 43 text

SUNSHINE PHP 2015 @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 44

Slide 44 text

Why is CSPRNG so hard in PHP?

Slide 45

Slide 45 text

Because no one’s made it easy.

Slide 46

Slide 46 text

CSPRNG MAKE EASY

Slide 47

Slide 47 text

I have NO idea what I’m doing!

Slide 48

Slide 48 text

Start with user-land implementation

Slide 49

Slide 49 text

github.com/SammyK/php-src-csprng

Slide 50

Slide 50 text

THREE ADD @SammyK #PNWPHP joind.in/talk/6b9c9 NEW FUNCTIONS random_int($min, $max) random_bytes($bytes) random_hex($bytes)

Slide 51

Slide 51 text

Vetted by infosec nerds. including…

Slide 52

Slide 52 text

SCOTT @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 53

Slide 53 text

THREE ADD @SammyK #PNWPHP joind.in/talk/6b9c9 NEW FUNCTIONS random_bytes($bytes) random_hex($bytes) random_int($min, $max)

Slide 54

Slide 54 text

THREE ADD @SammyK #PNWPHP joind.in/talk/6b9c9 NEW FUNCTIONS random_bytes($bytes) random_hex($bytes) random_int($min, $max) two

Slide 55

Slide 55 text

ADD @SammyK #PNWPHP joind.in/talk/6b9c9 NEW FUNCTIONS bin2hex(random_bytes($bytes)) === THREE two random_hex($bytes)

Slide 56

Slide 56 text

IMPLEMENTATION THE ACTUAL @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 57

Slide 57 text

No content

Slide 58

Slide 58 text

google!

Slide 59

Slide 59 text

COPY I DON’T ALWAYS PASTE & BUT WHEN I DO…

Slide 60

Slide 60 text

github.com/php/php-src/pull/191/files

Slide 61

Slide 61 text

/ext/standard/basic_functions.c

Slide 62

Slide 62 text

/ext/standard/base64.c

Slide 63

Slide 63 text

COPY PASTE @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 64

Slide 64 text

COMPILE TEST @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 65

Slide 65 text

random bytes int min max ?? ?? ? ??!! @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 66

Slide 66 text

I have NO idea what I’m doing! random bytes int min max

Slide 67

Slide 67 text

ROOM 11 @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 68

Slide 68 text

segfault @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 69

Slide 69 text

LEIGH LAST NAME? @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 70

Slide 70 text

@SammyK #PNWPHP joind.in/talk/6b9c9

Slide 71

Slide 71 text

THE @SammyK #PNWPHP joind.in/talk/6b9c9 P R O C E S S (REQUEST FOR COMMENTS)

Slide 72

Slide 72 text

@SammyK #PNWPHP joind.in/talk/6b9c9 [email protected]

Slide 73

Slide 73 text

@SammyK #PNWPHP joind.in/talk/6b9c9 GET YOU SOME WIKI KARMA

Slide 74

Slide 74 text

@SammyK #PNWPHP joind.in/talk/6b9c9 GET YOU SOME WIKI KARMA wiki.php.net

Slide 75

Slide 75 text

@SammyK #PNWPHP joind.in/talk/6b9c9 GET YOU SOME WIKI KARMA [email protected]

Slide 76

Slide 76 text

@SammyK #PNWPHP joind.in/talk/6b9c9 YOUR RFC CREATE wiki.php.net/rfc/howto

Slide 77

Slide 77 text

@SammyK #PNWPHP joind.in/talk/6b9c9 YOUR RFC ANNOUNCE [email protected]

Slide 78

Slide 78 text

@SammyK #PNWPHP joind.in/talk/6b9c9 FOR 2 WEEKS WAIT

Slide 79

Slide 79 text

@SammyK #PNWPHP joind.in/talk/6b9c9 UNDER DISCUSSION

Slide 80

Slide 80 text

@SammyK #PNWPHP joind.in/talk/6b9c9 ANNOUNCE THE VOTING PHASE [email protected]

Slide 81

Slide 81 text

@SammyK #PNWPHP joind.in/talk/6b9c9 USUALLY 2 WEEKS

Slide 82

Slide 82 text

@SammyK #PNWPHP joind.in/talk/6b9c9

Slide 83

Slide 83 text

@SammyK #PNWPHP joind.in/talk/6b9c9 sammyk.me/how-to-contribute-to-php-documentation

Slide 84

Slide 84 text

THE @SammyK #PNWPHP joind.in/talk/6b9c9 P R O C E S S wiki.php.net/rfc/howto

Slide 85

Slide 85 text

RFC WORKING IMPLEMENTATION ANNOUNCE TO INTERNALS CHECKLIST @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 86

Slide 86 text

RFC WORKING IMPLEMENTATION ANNOUNCE TO INTERNALS CHECKLIST ✓ @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 87

Slide 87 text

RFC WORKING IMPLEMENTATION ANNOUNCE TO INTERNALS CHECKLIST ✓ ✓ @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 88

Slide 88 text

RFC WORKING IMPLEMENTATION ANNOUNCE TO INTERNALS CHECKLIST ✓ ✓ x @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 89

Slide 89 text

RFC WORKING IMPLEMENTATION ANNOUNCE TO INTERNALS CHECKLIST ✓ ✓ x PHP internals is scawy!

Slide 90

Slide 90 text

Everyone is smarter than me - I’ll be a laughingstock! Everyone is mean - look at scalar type- hints drama!

Slide 91

Slide 91 text

Let’s do this sh… stuff!

Slide 92

Slide 92 text

No content

Slide 93

Slide 93 text

No content

Slide 94

Slide 94 text

LATER …TWO WEEKS

Slide 95

Slide 95 text

No content

Slide 96

Slide 96 text

No content

Slide 97

Slide 97 text

@SammyK #PNWPHP joind.in/talk/6b9c9

Slide 98

Slide 98 text

@SammyK #PNWPHP joind.in/talk/6b9c9

Slide 99

Slide 99 text

JOURNEY MY CENTER TO THE OF @SammyK #PNWPHP joind.in/talk/6b9c9 IT’S LIKE EATING

Slide 100

Slide 100 text

LEARNED WHAT I I don’t know what I’m doing! HOW FEATURES ARE ADDED TO PHP THE CULTURE OF PHP INTERNALS BETTER AT C & C++ DEEPER UNDERSTANDING OF CSPRNG’S BINARY AND HEXADECIMAL NUMBER SYSTEMS HOW TO CONTRIBUTE TO THE PHP DOCS AND TONS MORE!

Slide 101

Slide 101 text

I STILL have no idea what I’m doing!

Slide 102

Slide 102 text

SCARY! INTERNALS IS @SammyK #PNWPHP joind.in/talk/6b9c9 http://saint-max.deviantart.com

Slide 103

Slide 103 text

SCARY! INTERNALS IS @SammyK #PNWPHP joind.in/talk/6b9c9 http://saint-max.deviantart.com not ^

Slide 104

Slide 104 text

COMMUNITY LOVING @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 105

Slide 105 text

@SammyK #PNWPHP joind.in/talk/6b9c9 I N T E R N A L S N E E D S YOU SOURCE BUGS WEBSITE TESTS

Slide 106

Slide 106 text

TABS INTERNALS USES @SammyK #PNWPHP joind.in/talk/6b9c9

Slide 107

Slide 107 text

THANKS! SAMMY KAYE POWERS @SammyK SammyK.me Host of @PHPRoundtable @ChiPHPUG West Coast Swing Hire me! :) /talk/6b9c9