UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here: nsa.gov/Press-Room/Press-Rel…
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Howard Lince III retweeted
Over 300,000 people die of drowning each year. In order to protect society, it is now illegal to consume or possess water.
Your government is also considering banning solid food, as it presents a needless choking hazard.
You are not an adult.
You are a baby.
Eat the baby food.
Howard Lince III retweeted
🦔The FBI issued a FLASH notice identifying 18 popular router models targeted in a large malware operation. Affected models include routers from D-Link, Netgear, TP-Link, and Zyxel. Attackers exploited known vulnerabilities to install malware called AVrecon, turning compromised devices into residential proxies, essentially renting out access to your home network to criminals who use it to hide their identity online. The FBI estimates access to around 369,000 devices has been sold since 2020 across more than 160 countries.
My Take
The detail worth understanding here is what a residential proxy actually means for the people whose routers were compromised. Criminals pay for access to these devices specifically because traffic routed through a home router looks like a regular person browsing the internet rather than a server in a data center. Your router becomes cover for someone else's fraud, cyberattacks, or worse, and you have no idea it's happening because your internet still works fine.
The FBI noted patches were already available for some of the vulnerabilities that were exploited. If your router is on this list, check the manufacturer's site for a firmware update. If it's old enough to no longer receive security patches, it's worth replacing reddgardless of whether it appears here specifically.
Hedgie🤗
Howard Lince III retweeted
If you use GitHub (especially if you pay for it!!) consider doing this *immediately*
Settings -> Privacy -> Disallow GitHub to train their models on your code.
GitHub opted *everyone* into training. No matter if you pay for the service (like I do). WTH
github.com/settings/copilot/…
Howard Lince III retweeted
An open source calculator firmware system has declared it will not be available in California due to their new “Operating System age verification” law.
Seriously.
“The DB48X project intends to rebuild and improve the user experience of the HP48 family of calculators.”
From the developer:
“As a consequence of recent legislative activity in California and Colorado.
DB48x is probably an operating system under these laws. However, it does not, cannot and will not implement age verification.”
github.com/c3d/db48x/tree/de…
We appreciate your patience and understanding as we work to deliver a secure and reliable release.
Updates are now available for the 25.x, 24.x, 22.x, 20.x Node.js release lines to address:
- 3 high severity issues
- 4 medium severity issues
- 1 low severity issue
nodejs.org/en/blog/vulnerabi…
Howard Lince III retweeted
Today, @nodejs published a security release for Node.js that fixes a critical bug affecting virtually every production Node.js app.
If you use React Server Components, Next.js, or ANY APM tool (Datadog, New Relic, OpenTelemetry), your app could be vulnerable to DoS attacks.
👇
Howard Lince III retweeted
Replying to @ThePrimeagen
TDD was a mistake. BDD was more acceptable, but testing after the fact probably will get you where you need to be, faster
Howard Lince III retweeted
Dear friends,
YouTube is blocking Odysee links!
Please RT to help us raise awareness to get this fixed.
Please stop this anti-competitive behavior @TeamYouTube @YouTube
Howard Lince III retweeted
Replying to @tritlo
Looking forward to replacing my processor because it’s arteries got clogged
Howard Lince III retweeted
People miss context too much when it comes to optimizing. This particular page makes less than a percent of a percent of the usage of the website. You’ll create a repository once and interact with it thousands of times. Optimization on this page of this kind is wasteful.
Howard Lince III retweeted
Replying to @theo
People seem unaware this is how much live validation and suggestion systems work.
If we were looking for actual alternatives though I could see at least two:
1. Have the list of repositories sent to the browser ahead of time, given the scope is for the user even a thousand repositories wouldn’t be a big deal.
2. Websocket would have less overhead
In reality, this is a nothing burger though
Howard Lince III retweeted
Replying to @HowardL3
I love github.com/fraktalio/fmodel-… (shoutout @idugalic)
Howard Lince III retweeted
Do you work a big corporate tech job? Do you want to explore other options?
I help a lot of start ups with hiring. The need for experienced engineers down to work in-person in SF is insane.
If you’re an experienced dev who wants to see what’s available, DM me.
Howard Lince III retweeted
Without a doubt, the greatest unexpected plot twist in the history of internet wars has just dropped:
youtube.com/watch?v=qFe5LiAC…
Howard Lince III retweeted
Consider two people;
P1: Reliable, prompt, good communicator, owns tasks, eager to learn, less experienced in framework/language.
P2: Highly intelligent, framework/language expert, needs constant follow-up, doesn’t own tasks, has preconceived answers, blames others, difficult to work with.
Who would you promote to senior?
82%Person 1
0%Person 2
18%🍿
11 votes • Final results Howard Lince III retweeted
Replying to @dervish_candela
Nah a deranged take is that everything must be one way. Also URLs are so ubiquitous that it’s reasonable to stick in the standard library.
Howard Lince III retweeted
37signals is hiring a Junior programmer. We're accepting applications until Wednesday, April 23rd at 12:00 PM CST. The salary is $145,849. apply.workable.com/37signals…


















