Programmer working on making myself obsolete · Hannover · AI enthusiast · Franz und Franz web agency · stargazer 🔭

Hannover
Joined July 2012
Georg Franz retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
197
2,488
532
15,852
1,401,136
-----BEGIN EC PRIVATE KEY----- 0x000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004 -----END EC PRIVATE KEY-----
38
Just a normal git pull at openclaw @steipete === git/openclaw === remote: Enumerating objects: 435995, done. remote: Counting objects: 100% (186053/186053), done. remote: Compressing objects: 100% (5599/5599), done. remote: Total 435995 (delta 183155), reused 180537 (delta 180454), pack-reused 249942 (from 3) Receiving objects: 100% (435995/435995), 2.35 GiB | 25.13 MiB/s, done. Resolving deltas: 100% (360203/360203), completed with 44796 local objects. Are you guys a little bit crazy?!!
2
1,270
Georg Franz retweeted
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. cfl.re/488w8dc
86
1,384
338
5,383
570,970
Georg Franz retweeted
PHP 8.5.12 released - 90 fixes in 29 components, including security fixes (CVE-2026-109618, CVE-2026-109619). Changelog + downloads: php-net.pro/news/php-8-5-12-…
40
2,499
211
5,315
696,256
Georg Franz retweeted
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free. We are seeing early attacks emerging and are updating mitigations as new vectors show up. This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
86
871
190
5,325
724,068
‼️ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours. Each key should be a 116-digit number, but one was just 4. Anyone can guess them and forge HTTPS certs for any website.
565
3,446
1,597
28,507
4,907,696
Georg Franz retweeted
🚨Python friends, upgrade (or have your agent upgrade) every certifi package across all your projects and machines! uv self update uv lock --upgrade-package certifi Private keys from 8 intermediate CA certs have been compromised! xitter.cf/astuyve/status/2112559… Some other things to upgrade: * Go: 1.27.3 or 1.26.10, then rebuild your Go programs * rustls-webpki: 0.103.16 * webpki-roots / webpki-root-certs: 1.0.10 * Electron: 44.9.1, 43.8.1 or 42.11.16 * NSS: 3.131.1 * Firefox: 158.0.1 (ESR: 153.5.1 or 115.43.1) * Ubuntu ca-certificates: 20260816ubuntu0..1 (for 22.04, 24.04, 26.04 and 26.10) * Homebrew ca-certificates: 2026-09-25_1 * Chrome, Apple, Windows: nothing to do, they’re blocked automatically Still waiting for a fix: * Debian ca-certificates: disable the two roots by hand Node.js * Composer ca-bundle * macOS /usr/bin/curl: remove the two roots from /etc/ssl/cert.pem by hand
private keys from 8 intermediate CA certs have been compromised (eMudhra) Happy "Update everything" day to all my pager-carrying friends emudhra.we-have-a-problem.co…
13
151
15
1,001
174,105
Red alert for all php web servers: php.net/archive/2026.php update available at Wednesday, 21 October 2026 at 14:00 UTC - I expect an earthquake. Hopefully my servers will survive unhacked.
57
Georg Franz retweeted
Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next. cfl.re/487DNbG
39
373
59
2,171
231,201
Cool, I've got $1,000 in credits from OpenAI!!! Why? Well, not really all that important. I did upgrade my $200 account to the $500 account on day one. I suppose that didn't work though as the limits are still at 20x rather than 25x... … … … … … "We're contacting you because an error prevented your weekly Codex and Work usage allowance from increasing when you upgraded from Pro 200 to Pro 500. Your account kept the allowance from your previous plan, so you received less usage than your new subscription included." To be honest I don't think it's quite as dramatic now actually as Tibo will just click the reset button every other day. BUT the $1k credits are a complete sham. API calls are typically 100x more expensive than subscription calls. Just the other day I blew through around $150 in 30 minutes on Claude via API calls (again, it was credit so not actual dollars). What was the reason again that I bought the $500 account as an EU citizen? @thsottiaux Go easy on me - I know I was stupid about this...
67
MCP tip: Keep your default toolset small (particularly if you're running on a server that supports dozens or hundreds of operations). Group the tools by service or workflow, show a useful subset by default, and make the rest of the capabilities available via configuration or on-demand discovery. GitHub, Azure, and Cloudflare show three ways to do this: GitHub: smaller defaults, optional toolsets. When GitHub rolled out its new default config in October 2025, they reported a reduction from 101 to 52 tools and a corresponding drop in token usage from 64,600 to 30,300 (a bit over 53% less tool context). Further toolsets are still available via explicit config. Azure: Group operations via service-level tools. Azure MCP's default namespace mode exposes one tool per Azure service namespace with internal routing to the individual operations. It also supports a single-tool mode that routes across Azure services. Cloudflare: Search + execute. Cloudflare's Code Mode server exposes its entire API via just two tools: search() and execute(). The agent finds the relevant API operations and then runs some JavaScript to invoke them. Cloudflare has around 1k tokens for the tool interface, which covers over 2500 API endpoints. These approaches reduce the amount of context that is consumed by tool descriptions and schemas, thereby freeing up context for the actual task. A more focused and relevant selection of tools can also lead to better tool selection and lower input token costs. Client limits also come into play: VS Code documents a 128 tool limit per request and provides virtual tool grouping to deal with larger sets. For your own MCP server, go with the defaults that are appropriate for the typical workflow and make the additional capabilities easy to find. Then measure task success and total token usage (including any additional discovery calls).
2
3
117
Me: Claude, why has this test been running for 2 hours already? Claude: Hold on, let me take a look... yeah, it won't finish because the test forces MySQL to process 53 million rows in a table, and it can't use the index. I'll move it to the slow-db group. Me: Excuse me?! For a test, you're using a table with 53 million rows?!! And there are even more slow DB tests already...?!! Software architecture... LLMs just can't do that...
1
24
Me: Hey Claude, take a look. The server has a load of 5 since hours... what's going on? Claude: Hm, there are 2000 requests on the database. Me: 2000 - sounds like not that many... Claude: Per second Me: Uh. ... Software architecture ... LLMs still can't handle it
1
1
27
Couldn't load usage: Internal error: "Billing service error: cursor billing: snapshot failed" @larsencc any idea? (got this within grok build)
1
2
65
Another try with the Claude API Console: I received $200 in API credits as a gift for my Max account and wanted to see if anything had changed. In my previous attempts, API usage was always about 100 times more expensive than through the subscription. I still had $50 in credit left from before, so now I have a total of $250. Here we go—a project where I started a workflow with 8 agents. So, plenty to do. After 10 minutes, $28 was already gone (Opus xhigh ultracode). Then I thought, well, okay, it'll last about 90 minutes—let's see. Then I stepped away from the computer for a short while and came back after 45 minutes—and it was all gone. But in that typical, completely incomprehensible Claude way. So Claude Code said under /usage: "Yes, I've used up $51." (Me: "Huh? But you have $250, right?") Okay, so I logged in through the browser, and it said: -$2.97 balance (huh? how's that possible?) and $117 used. (But then there should still be over $100 left?!) So I asked the chatbot if I now have to pay the extra $3. It said, "No, because it doesn't update that quickly—it’ll be fine." Well, now, two hours later, nothing has changed yet—I'll check again tomorrow. @lydiahallie
5
2
106
Oh, all that complaining paid off - there was a Gemini 4 usage reset :-)
3
86