Pinned Tweet
The Founder-Parent Paradox:
You're building a business to provide a better future for your family, but the act of building it takes you away from your family in the present.
The ultimate balancing act.
It just.. keeps.. coming 🤯
is it time to turn the internet off yet
kb.isc.org/docs/cve-2026-943…
So.. LinkedIn Recruiter wants $170 a month per seat. Treg Recruit charges about $0.20 per candidate.
At a small product studio like ours we don't hire every month. Paying for a recruiting seat that sits idle most of the year will never makes sense to me.
Pay per candidate, and run it from the agent I already use all day, get verified contact details back. That's a model I'd actually use 🙌
🤝 Paid partnership
Introducing OpenSource Recruiter for Claude
- Paste any job post → 50 ranked candidates
- Personal email + mobile, $0.20/candidate
- No $170/mo seat, no 30-InMail limit
- 0% markup, fully open source
Try it at treg.to/recruit
Repo link below 👇
A truly exhausting week in the software factory. Never seen so much exploits in one day in my whole career.
HugOps to all fellow devs out there!
Ruby 4.0.8 is out with an Onigmo regex overflow fix that looks like the root cause here.
github.com/ruby/ruby/release…
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
It’ll get worse before it gets better. 😬
But we’ll get through this!
October has been an absolute nightmare for software
> Railway - customer secrets exposure
> LiteLLM - malicious PyPI + Docker releases
> Zeabur - infrastructure breached
> OpenCode - AI API keys exposed
> OVHcloud CLI - official binaries backdoored
> Rank Math PRO - malware in official plugin
> TeamUpdraft - customer data compromised
> ConnectWise - cloud backup identities compromised
> Tensorlake - npm package infected
> SubQuery - backdoored npm package
> GhostAction - GitHub repos with malicious workflows
> PHP - critical RCE vulnerabilities
> Node.js - security vulnerabilities patched
> eMudhra - certificate authority keys compromised
> Tailscale - eMudhra incident
At this point, the biggest security risk might not be the code we write, but the code we trust...
In 2016 Jensen Huang delivered a DGX-1 to OpenAI. One petaflop, 128 GB, and it "took two people to carry upstairs."
At GTC Berlin he held the same headline specs in one hand. 👇
Anthropic’s answer to Grok Bot and others is here 👀
I should try that for zentty.org 😁
When you're not running any PHP services today:
PHP changes are live. Start patching. php.net/archive/2026.php#202…
Huge thanks to coordinated work by @ThePHPF!
Me stopping the client from asking for an ETA every 10 minutes:
PHP Security Advisories are out:
RCE via OOM corruption (9.2/10): github.com/php/php-src/secur…
RCE via stale global state (9.2/10): github.com/php/php-src/secur…
Need to upgrade to 8.2.35, 8.3.36, 8.4.27, or 8.5.12 ASAP to mitigate. Updates rolling out now. #PHP
