Ondřej Surý
ON THE RECORD · 10 verbatim quotes · every quote source-verified
“It's kind of fulfilling because I sense my work has a purpose,”
Ondřej Surý · said date not stated · reported 2026-10-24
Surý responded modestly when asked how it felt to be described as one of the people who helped save the internet.
“If you just take and don't give back then it will backfire.”
Ondřej Surý · said date not stated · reported 2026-10-24
Surý warned that major technology companies relying on open source software without contributing back could face negative consequences.
“I think they should be more responsible,”
Ondřej Surý · said date not stated · reported 2026-10-24
Surý said major technology companies should take more responsibility for supporting the open source software they depend upon.
“This week is basically about a year's worth of the contributions that I got before,”
Ondřej Surý · said date not stated · reported 2026-10-24
Surý revealed that he received more than $10,000 in donations in just a few days during the security scramble.
“I got aware that this is quite severe and I don't have that much time to prepare the packaging of the PHP that I provide to people,”
Ondřej Surý · said date not stated · reported 2026-10-24
After information about the PHP vulnerabilities leaked online, the planned release was brought forward, increasing the urgency of Surý's packaging work.
“The feeling is like I am responsible for all these people and I can't fail them,”
Ondřej Surý · said date not stated · reported 2026-10-24
Surý voluntarily maintains PHP software packages for Debian and Ubuntu, and described the pressure he feels when security fixes must be delivered.
“And people should be prepared to act this quickly more often because incidents like this might happen in the future - in the near future.”
Ondřej Surý · said date not stated · reported 2026-10-24
Surý warned that people should be prepared to respond quickly to similar security incidents in the near future.
“Yes, that's pretty much true,”
Ondřej Surý · said date not stated · reported 2026-10-24
Surý confirmed that much of the responsibility for maintaining the PHP software packages ultimately rests with him.
“I think this is was the most severe incident in years, but I think that because of the AI capabilities are getting better in the cyber security, this might not be an isolated incident,”
Ondřej Surý · said date not stated · reported 2026-10-24
Surý expressed concern that AI is accelerating the discovery of security vulnerabilities and that similar severe incidents may occur in the future.
“At the same time, I feel that not enough credit has been given to other people who has been part of this, like the PHP project people.”
Ondřej Surý · said date not stated · reported 2026-10-24
Surý acknowledged that others, including the PHP project people, deserved more credit for their role in addressing the vulnerabilities.