Christian Van Der Henst✨

Building agents. Lots of them.

[Christian Van Der Henst✨ @cvander]

Delégale programar a los LLMs. Enfócate en distribución.

[Christian Van Der Henst✨ @cvander]

More chaos

[Railway @Railway]

An urgent notice from the Railway team

https://t.co/niUAhTAQJM

[Christian Van Der Henst✨ @cvander]

Grok bot, Muse, Dots: meet the new contender.

Siri is still loading GPT 3.

[Claude @claudeai]

We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent.

It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.

[Christian Van Der Henst✨ @cvander]

@jeduan Que le den all access a Nathan a pasar un tiempo con Meghan Markel y el principe.

[Christian Van Der Henst✨ @cvander]

Saw the Movie. Nathan is awesome.

Disappointed that we’re still giving air time to Elizabeth Holmes tbh

[Christian Van Der Henst✨ @cvander]

@santtiagom_ El capitalismo funcionando.

[Christian Van Der Henst✨ @cvander]

Big reminder of the power of PHP today

[Matthew Prince 🌥 @eastdakota]

Two classes extremely bad cyber vulnerabilities disclosed in the last 24 hours. The first potentially impacts everyone online. The second impacts nearly everyone running a server.

tl;dr: Everyone should upgrade their OS and Browser as soon as possible. If you run a server you should upgrade PHP (or ensure it’s removed if you’re not using it) as soon as possible.

The first class of vulnerabilities is a set of root TLS certificates that were discovered to have a trivial private key. Literally the number 4. These roots were controlled by #eMudhra. The problem is that with that an attacker could create a certificate and, if they could get in the traffic flow, intercept traffic to any site or service. The solution is to stop trusting certificates issued by these vulnerable roots. Upgrading your browser and OS is the fastest way for most Internet users to do this.

The second class of vulnerabilities doesn’t apply to most consumers directly, but does apply to most anyone running a server. These vulnerabilities have been dubbed #php2shell. PHP is one of the most widely used web programming languages. It’s estimated 70% of websites run on PHP. These vulnerabilities allow an attacker to send a crafted set of queries to a server running PHP and potentially take over the server. From there they could potentially read, modify, delete, or repurpose anything on the server. The solution is to upgrade PHP to the latest version ASAP. Even if you’re not using PHP for your web development, it’s often included by default. So make sure it is either upgraded or fully removed.

@Cloudflare received advanced warning of both of these classes of vulnerabilities. We’ve ensured that where we act as a proxy we are no longer trusting the vulnerable roots. We are also reviewing certificate transparency (CT) logs for any sign the vulnerability was exploited before its disclosure. We have not found any evidence but CT logs are not perfect and a sophisticated attacker who knew about the weakness could have exploited it without a new certificate being logged.

For the PHP vulnerabilities, we have deployed mitigations available for all customers for free. Because of the complexity of the vulnerabilities and number of ways it can be exploited, we also released new WAF capabilities that are unique in the industry to catch the exploit based on the response. These too are available for every Cloudflare customer for free.

Even if you are taking advantage of Cloudflare’s protection, it is important to upgrade your OS, browsers, and PHP installations as soon as possible. We can provide a strong bandaid, but the best protection is to fix the underlying problem.

If you’re interested in learning more, you can read our blogs:

Vulnerable roots: https://t.co/TR77Zd01A0
PHP vulnerabilities: https://t.co/qTUK8i3Oww

[The PHP Foundation @ThePHPF]

The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.

PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.

[Cloudflare @Cloudflare]

Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next. https://t.co/lYGxHb3PHS

[Christian Van Der Henst✨ @cvander]

Product managers at FireTV, Apple Tv, Roku, Google tv, Tizen Os, etc:

Open-source your platform officially and win all the love and the market.

[Yassir D @easys_arq]

When I saw TV’s get vibecoded, I had to try.

I’m not just building a new OS for the TV itself, but I’m also building new UI’s for my favorite apps.

YouTube, Netflix, Amazon and more coming

[Christian Van Der Henst✨ @cvander]

@amartino Hay como 8 repos. Y un stick en producción. Love this trend.

[Christian Van Der Henst✨ @cvander]

This is such a smart play

[Paul Copplestone - e/postgres @kiwicopple]

i had 12 Claude agents running in parallel for 6 hours and i managed to reverse engineer @supabase

i'm making it available here so that you can save your tokens - 100% free & open-source:

https://t.co/uA7zj7SCV9

[Christian Van Der Henst✨ @cvander]

@ekuyda Lets go

[Christian Van Der Henst✨ @cvander]

@ThadCollins @gathint Wonder if maybe using a roku or similar could be a way here. No luck so far with samsung.

[Christian Van Der Henst✨ @cvander]

@nikitabier Ted talk era is an amazing way to describe this.

[Christian Van Der Henst✨ @cvander]

@antoniogm @united @Starlink It’s a good airline to meditate

[Christian Van Der Henst✨ @cvander]

@eastdakota Party!

[Christian Van Der Henst✨ @cvander]

@rauchg Have fun today!

[Christian Van Der Henst✨ @cvander]

@tekelala Buena pregunta.

[Christian Van Der Henst✨ @cvander]

Primer NanoPodcast. Le pregunto a un Humano @RitchieRo que tan confiable son los Agentes AI para delegar mis contratos?