I spent a bunch of time today looking into various public posts and announcements about the PHP2Shell embargo and leaks, trying to piece together who leaked or announced what and when. It got to the point where there were so many little details that it became impossible keep it straight in my head, so it occurred to me to build a clear end to end timeline with links to the sources, and I figured I'd share it with everyone.

Please note that while I did read though the links, this isn't anything I'd bet the farm on - often there's a lot of he said she said and second or third hand information, and I tried to be clear in marking those. Plus, claude was used to compile and crosscheck references, for better or for worse.

Let me know of any inaccuracies or missing details. Thank you!