German researcher <A HREF="http://securitywatch.eweek.com/open_source/php_security_guru_quits_in_disgust.html?kc=EWENTEMNL121506EOAD">Stefan Esser has quit the PHP Security Response Team</A> in disgust, accusing the open-source group of hiding the slow response time to fixing vulnerabilities and, even worse, refusing to fix known flaws for months. Esser, one of the most prominent open-source security gurus, has "retired" from php@security.net--a group he founded--to concentrate on Suhosin, the double-barreled protection system for PHP installations.