IT lexicon › Security › Stefan Esser

Stefan Esser

Security På svenska → Updated: 2026-10-17
More info
Known for
Suhosin, Month of PHP Bugs, iOS kernel exploitation
Founded
SektionEins
Country
Germany

German security researcher who quit PHP's security team in protest and then demonstrated why — one bug a day for a month.

Esser sat on the PHP security team but by 2006 had run out of patience with how slowly reported holes got fixed. His answer was the Hardened-PHP project and the Suhosin hardening patch, followed in March 2007 by the Month of PHP Bugs: more than forty vulnerabilities in the language core, published in quick succession. The same year he founded the consultancy SektionEins.

He then turned to iOS, releasing kernel exploits under the handle i0n1c that ended up in jailbreaks, and co-wrote iOS Hacker's Handbook (2012) with, among others, Charlie Miller and Dino Dai Zovi.

← Back to the lexicon