If all the govs shutting down servers for a PHP update, all the hosters & enterprises terrified by the vuln, gave $100k, or just $50k a year to the PHP Foundation, things could look very differently. Go, make your employer sponsor *today* https://t.co/z1mUcXMqy9 #php #phpc @Th@ThePHPF
@AjeyGore unfortunately pitching these makes you sound more like an expert to business folks, leading to a more likely promotion than people who keep it simple
@connorado@AmpCode@sqs@thorstenball but being a subsidary, many people in our parent and sisters companies look at us like irresponsible cowboys though, and internal opportunities often flew past us
๐จ BREAKING: Node.js just dropped its OWN security bombshell.
4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers.
โ 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity.
โ REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely.
โ TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions.
โ Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to.
โ THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates.
โ RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches.
โ PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers.
PHP AND Node.js both facing major security disclosures on the SAME DAY.
If you run a website or application, TODAY is the day to check your servers.
And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated.
Don't be the last one to patch.
@samwhoo yea build a bunch of internal tools and my colleague responses was its too slow compared to doing it myself.
I was using a flash model and it worked. Just not fast enough
I tried to tell them they can let it run in the background while they do other stuffs but they dont buy it
@neogoose_btw i send a slack message to chatgpt bot with GPT 6 Luna, "delete 1 file and make a PR". Used up my 5 hours usage limit instantly, happened multiple times