There's an article on SlashDot
that links to an article on heise Security
that Stefan Esser, a member of the PHP Security Team, has resigned. Among other reasons, he states that "any attempt to improve the security of PHP from the inside is futile".
Let the bashing/flaming begin!