@Victor_Fdz@Bonoman85 Pues yo me estoy gozando el Dawnwalker. El sistema de avanzar el tiempo según las misiones que hagas tiene su chicha y me parece una buena vuelta de tuerca al sistema típico.
@Bonoman85@pagb666@Panchblack10 De todas maneras a parte de eso, soy el único al que le parece todo un poco impostado? En plan, después de todos los despidos por parte de Microsoft y tal hay que aparentar que todo sigue guay y recordar los buenos tiempos...
Type juggling has been exploited in real #PHP authentication bypasses. Here's the classic:
if ($userInput == $storedHash) { // login success }
If $storedHash starts with "0e" followed by digits (like "0e462097"), PHP treats it as scientific notation: 0 * 10^462097 = 0.
An attacker just needs to find an input whose MD5 also starts with "0e" + digits. Both sides evaluate to 0. 0 == 0 is true.
Known "magic hashes":
- MD5("240610708") = 0e462097...
- MD5("QNKCDZO") = 0e830400...
- SHA1("aaroZmOk") = 0e00000...
Fix: use === everywhere. Or better: hash_equals() for timing-safe comparison. Never == for security checks.
📘 "Domain-Driven Design in PHP" just got a 2nd edition — now with PHP 8.5 examples.
Entities, Value Objects, Aggregates, CQRS, Hexagonal Architecture, Bounded Contexts… all with real code.
By @carlosbuenosvinos @theUniC@keyvanakbary
🔗 https://t.co/J4PrxpAJpb
#DDD#PHP
@mosqui80 No recuerdo bien el Motorstorm, pero esas cámaras lentas enfocando a los coches mientras se destrozan me recuerdan totalmente a los Burnout. Podría ser el hijo bastardo de los dos XD
El proyecto en el que he estado trabajando está llegando a su fin, así que estoy empezando a buscar nuevas aventuras!
Soy Game Designer desde hace 12 años. Hago de todo, pero especialmente diseño de sistemas, progresión y balance.
Si es lo que buscas, mis DMs están abiertos! 🙂
All my new code will be closed-source from now on. I've contributed millions of lines of carefully written OSS code over the past decade, spent thousands of hours helping other people. If you want to use my libraries (1M+ downloads/month) in the future, you have to pay.
I made good money funneling people through my OSS and being recognized as expert in several fields. This was entirely based on HUMANS knowing and seeing me by USING and INTERACTING with my code. No humans will ever read my docs again when coding agents do it in seconds. Nobody will even know it's me who built it.
Look at Tailwind: 75 million downloads/month, more popular than ever, revenue down 80%, docs traffic down 40%, 75% of engineering team laid off. Someone submitted a PR to add LLM-optimized docs and Wathan had to decline - optimizing for agents accelerates his business's death. He's being asked to build the infrastructure for his own obsolescence.
Two of the most common OSS business models:
- Open Core: Give away the library, sell premium once you reach critical mass (Tailwind UI, Prisma Accelerate, Supabase Cloud...)
- Expertise Moat: Be THE expert in your library - consulting gigs, speaking, higher salary
Tailwind just proved the first one is dying. Agents bypass the documentation funnel. They don't see your premium tier. Every project relying on docs-to-premium conversion will face the same pressure: Prisma, Drizzle, MikroORM, Strapi, and many more.
The core insight: OSS monetization was always about attention. Human eyeballs on your docs, brand, expertise. That attention has literally moved into attention layers. Your docs trained the models that now make visiting you unnecessary. Human attention paid. Artificial attention doesn't.
Some OSS will keep going - wealthy devs doing it for fun or education. That's not a system, that's charity. Most popular OSS runs on economic incentives. Destroy them, they stop playing.
Why go closed-source? When the monetization funnel is broken, you move payment to the only point that still exists: access. OSS gave away access hoping to monetize attention downstream. Agents broke downstream. Closed-source gates access directly.
The final irony: OSS trained the models now killing it. We built our own replacement.
My prediction: a new marketplace emerges, built for agents. Want your agent to use Tailwind? Prisma? Pay per access. Libraries become APIs with meters. The old model: free code -> human attention -> monetization. The new model: pay at the gate or your agent doesn't get in.
This Livewire RCE (>=3; < 3.6.4) is now actively being abused with an exploit available;
https://t.co/02H6hu0CtU
Hearing reports of:
- new php files in public folder with backdoors
- perl scripts active processes
- weird jobs in the queue
Check your version and update!