← Feed

Posts

• View post

  #hackers have begun exploiting a critical #Brotli #vulnerability known as #Node2Shell, #Broccoli2Shell, and #HTTP2Shell. https://nvd.nist.gov/vuln/detail/cve-2026-111497 #infosec #security #cisa #exploit

• View post

  every day we start the new backstory to a post apocalyptic survival video game. …a new startup to genetically engineer war dogs for the military. #Warhound comes out of stealth at $1.2B valuation. https://www.forbes.com/sites/amyfeldman/2026/10/22/the-woolly-mammoth-billionaires-new-startup-is-genetically-engineering-war-dogs-for-the-military/

• View post

  The Chinese Communist Party took possession of highly classified U.S. F-35 stealth fighter jet components. The United States of America got 2 pandas. "ArT oF tHe DeAl" #uspol #china #usa

• View post

  a little hack… because func_get_arg(), func_num_args(), and func_get_args() ignore "unknown" named variadic arguments. https://3v4l.org/e1UK7#veol edit: extract to a global function https://3v4l.org/UvZt8#veol #PHP

• View post

  https://youtu.be/32u5T6lO8qk

• View post

  Rentier capitalism Pay more for #AI you never asked for, or pay less for a crippled version of the software you already had.

• View post

  The inability to feel shame is a super power that can make you really rich… ∆

• View post

  The packages published by the user "spruko" are all executing arbitrary, obfuscated or malicious code… via "autoload.files" entry in composer.json It reads an embedded payload from a fake `index.jpg` file, decodes it through multiple de-obfuscation functions, and executes it via `eval()` in almost ever php file. I have no interest to investigate further, but somebody should look into it and take action. https://packagist.org/users/spruko https://github.com/...

• View post

  🚨 A compromise affecting the community-maintained Laravel Lang project introduced remote code execution backdoors across multiple packages, including: - Laravel-Lang/lang - Laravel-Lang/http-statuses - Laravel-Lang/actions - Laravel-Lang/attributes All tags were rewritten pointing to malicious commits https://www.aikido.dev/blog/supply-chain-attack-targets-laravel-lang-packages-with-credential-stealer https://github.com/Laravel-Lang/lang/issues/8295 https://github.com/Laravel-Lang/common/is...

• View post

  ✅ Create PRs to mitigate #npm #SupplyChainAttack via #npmrc file https://github.com/phpactor/vscode-phpactor/pull/220 https://github.com/xdebug/vscode-php-debug/pull/1125 ✅ Disable extension "auto update" and "auto update check" in #VSCode

• View post

  Did #AI free up your schedule, or have you just been paying to babysit a chatbot 20 hours a day?

• View post

  #arXiv is cracking down on sloppy AI-generated research submissions.👏🏾 If a paper contains obvious AI hallucinations, specially fake citations and references, authors can now get: - a 1-year ban from posting to arXiv, - and afterward may only post papers already accepted by reputable peer-reviewed venues The policy is aimed at stopping “AI slop” from flooding preprint servers. Submitting AI-slop show negligence and threaten trust in science. https://www.nature.com/articles/d41586-026-01595...

• View post

  Using AI to polish grammar is one thing, but if you can't explain your position without outsourcing the thinking to AI, maybe you don't understand it well enough to present it as a deeply held argument based on facts and experience. #AI #PHP #Internals

• View post

  #Composer currently supports locking a branch to a specific commit: `dev-main#a1b2c3d4` However, it does not support combining a semantic version constraint with a specific immutable commit SHA: `^1.2.3#a1b2c3d4` Would Composer consider adding support for dependency constraints that combine a semantic version with an immutable commit SHA? - Protect users from malicious/compromised tag re-targeting - Ensure a tagged release resolves to an expected immutable commit or fail #PHP #ComposerPHP

• View post

  They show you how much they used, but not what it costs them. FREE But...You… you will have to pay. rip electricity and water. https://xcancel.com/i/status/2055346265869721905 #AI #CodexOpenAI #OpenAI #TokenEfficiency #TokenSpending #TokenMaxing #Sustainability

• View post

  LibrariesIO API Client an event dispatcher feels appropriate…but not caching. #PHP #PSR7 #PSR11 #PSR14 #PSR17 #PSR18 #PSR20

• View post

  Would you accept a PR to add "Class" Constraint? Using classes that extend `PHPUnit\Framework\Constraint\Constraint` then adding them to `PHPUnit\Framework\Assert`? If yes, which branch should be target? @phpunit @sebastian

• View post

  Much of the web is powered by #PHP PHP’s reputation was shaped over decades through real engineering decisions, ecosystem evolution, and developer experience. Just because #Laravel creates fake hype through aggressive unethical marketing, community manipulation, fake influencers, and vendor lock-in does not mean it has the best marketing. The real challenge is legacy reputation, fragmented ecosystem, and competition from newer languages; not a lack of tweets or vlogs. https://phpc.social/@br...

• View post

  a blog and art gallery where users can purchase a license to use the art. Modules /App /Blog /Gallery /License /Checkout /User /Admin Original image storage (private) - Automatic thumbnails - Watermarked previews - Metadata extraction - Download via signed URLs Purchase Flow - User selects artwork - Chooses license tier - Pays - Receives: * Invoice * License * Download access /blog /blog/{slug} /gallery/{id} /license/{id} /checkout /account /purchases /admin Phase 1/8: Blog and User

• View post

  https://www.wiz.io/blog/mini-shai-hulud-strikes-again-tanstack-more-npm-packages-compromised #CyberSecurity #InfoSec #SupplyChainSecurity #SoftwareSupplyChain #NPM #OpenSourceSecurity #AppSec #DevSecOps #ThreatIntel #Malware #JavaScript #NodeJS #CICD #GitHubActions #CloudSecurity #TypeScript #ReactJS #WebDev #OpenSource #DevTools #SoftwareEngineering #DeveloperSecurity #SecureCoding #GitHub #SupplyChainAttack #Programming #TechNews #DevOps #ApplicationSecurity #ThreatResearch #SecurityEngineerin...

• View post

  🚨 Heads up, Chrome users! Google’s browser is quietly downloading a 4GB AI model without permission. https://www.pcmag.com/news/chrome-is-quietly-downloading-4gb-ai-model-without-your-permission #MachineLearning #TechNews #Chrome #Google #Privacy #CyberSecurity #DataSecurity #OnlineSafety #DigitalRights #TechUpdate #TechAlert #AIModel #BigData #UserPrivacy

• View post

  unsafe is abused a lot. you're supposed to use it for small abstractions that you can prove are safe, but the compiler can't. not as a way to silence borrow checker errors until the code compiles. #rust #rustlang

• View post

  > After we were told about the problem and then denied it and then realized we are wrong, we deployed a fix in hours. *cringe* https://xcancel.com/zackkorman/status/2048767688411959573 #Vercel #Lovable

• View post

  🚨 Critical Composer Update: 2.9.8 & 2.2.28 fix a GitHub Actions token disclosure! ⚠️ Update NOW or disable GitHub Actions immediately! https://blog.packagist.com/composer-2-9-8-and-2-2-28-fix-github-actions-token-disclosure-in-error-messages/ #PHP #Composer #ComposerPHP #OpenSource #WebDevelopment #GitHubActions #DevSecOps #CyberSecurity #SoftwareUpdate #PatchRelease #DependencyManagement #SecurityFix #Programming #Packagist #PHPDev #ComposerUpdate #OpenSourceSoftware #WebDevLife #Info...

• View post

  Installed my new favorite PHP package by @samsonasik, Turn PHP architecture decisions into enforceable rules you can test with PHPUnit. https://github.com/boundwize/structarmed (Automated dependency installs, validation, updates, CI/CD, and workflow orchestration entirely through GhostCI) #PHP

• View post

  Happy Mother's Day #PHP #PHPWomen

• View post

  switched to revolt/event-loop

• View post

  I love working with events. https://github.com/php-tui/php-tui

• View post

  Console application Server mode Worker (FrankenPHP) mode 1 index.php 1 entry point 0 duplication

• View post

  testing a new event & listener naming convention.