Lead Full-stack engineer @WeWorkJP. Organizer @LaravelliveJP & @phptokyo 👉 Laravel Live Japan: https://xitter.cf/t.co/vWQ5zWfJMx 👉 Discord: https://xitter.cf/t.co/z9uEaYrDtr

Tokyo, Japan
Joined January 2022
No big breaking changes planned other than dropping CJS in Vue 4 #vuefes
3
236
さて、#vuefes に向かってます! Heading to #vuefes !
9
309
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
設営完了しました! 🙌 会場で皆さんとお会いできるのを楽しみにしております! #vuefes
33
2
95
4,001
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
"The php2shell scare pulled PHP onto front pages worldwide, from Japan's prime minister to the NSA, and showed how much of the internet quietly runs on it." @mattstauffer phpnews.net/php2shell-php-re…
5
10
1,189
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
php vulnerabilities: time to clarify what really happened here's my conversation with @derickr, a member of php internals. we go through the full timeline and the facts watch here: youtu.be/5X5csEbmHqs?si=uAk7…
3
21
4
114
11,741
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
14
73
9
720
35,177
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
PHPで新たなRCE脆弱性CVE-2026-115560が判明したと。 設定でシリアライズ方式をphp_binaryまたはphp_serializeにし、実行中にphpへ切り替えるなど、まれな条件で影響するとのことで、緊急修正はなく、次回の通常リリースまでsession.upload_progress.enabled=0を推奨すると。
Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc
1
80
6
210
30,473
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
The PHP security team is advising everyone to set this config until the next patch: session.upload_progress.enabled=0 I’ll be cutting a release shortly where serversideup/php will do this for you by default ⚡️ php.net/archive/2026.php#202…
13
84
7
415
42,730
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
PHP security team: keep session.upload_progress.enabled=0 until the next bugfix release. It blocks a rare RCE path, CVE-2026-115560.
5
4
35
8,572
I tried the Helium browser today and at least my first impression wasn't too great
112
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc
49
898
151
2,835
398,855
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
1
4
46
3,543