Software Architect & AI Agentic Engineer · Laravel · Vue 3 · Claude/OpenAI · Multi-tenant SaaS founder (CONDOMERA) · LLM content-generation pipelines in product
Colombia / Dominican Republic
Joined September 2020
- Tweets3.2K
- Following837
- Followers344
- Likes5.7K
Ricardo Vargas / Software Engineer retweeted
how wasn't i aware of soloterm???
terminally online missed important product, how could that happen
My metaharness, Solo (soloterm.com), now supports Linux! It's very good
Give it a shot and lemme know how it goes 😅
This video reminds me that there’s still hope for humanity: youtube.com/watch?v=AEnJw5G3…
Cool ideas! People are so creative! Love it @imbabybrooklyn
BTW, older PHP versions are still supported by the great Gary, but if you need help upgrading your projects to a modern PHP version, we are here to help! Write to me for a quote.
Ricardo Vargas / Software Engineer retweeted
If you updated PHP versions 5.6, 7.0 or 7.1 from Ondřej's repo on Wednesday, consider another upgrade ASAP: the package update from last night fixes a few more multipart-upload fixes 🚨
$ apt update
$ apt upgrade
And errr ... consider moving to PHP 8.x 😬
I honestly believe the @arcboost team did such a great job with that browser that they decided to finish it, but @diabrowser is going to end both projects. I'm still using Arc, and Dia isn't my replacement.
I love the Hacker mentality :)
I taught Rust to speak 1995 PHP. 🦀🐘
Rebuilt PHP/FI 1.x (Rasmus’ original C interpreter) from scratch. “0” is truthy, 10/3 is 3 — every weird old quirk kept. Zero deps, its own dev server.
A love letter to where PHP came from. PHP 8 next?
#PHP #RustLang
github.com/elminson/rustphp
A month ago, I set out to finish one thing. That turned into four tools to improve my workflow. Now, those tools have become products of their own. Along the way, I built a mobile app for CONDOMERA, automated website generation, and created tools that help me build faster.
The mobile app surprised me the most. Even in my wildest dreams, I didn’t expect to build one in less than a month.
It was hard. Every step made me respect the developers who do this every day even more. What started as one task has opened up possibilities I hadn’t considered a month ago.
Have you ever built something to solve your own problem, then realized it could help other people too?
I never earn from the internet. I've been building software for years, but I've never built anything that lets me earn recurring income on my own. Shame on me! No. Just that I never have enough ambition. Maybe culture, maybe just the time. Now I understand it's life preparing us.
Before AI: A lot of dream projects waiting to see the light.
Why? Complexity, multidisciplinary requirements, life...
After AI: Remove the fear; dream bigger (Thanks @aarondfrancis for your conversations with @IanLandsman), concentrate, and ship.
A lot has changed over the past three years. So have I.
I’m more productive than ever, but the bigger change is how I approach the work.
I'm clearer about what I want to build and more confident I can make it happen.
I’ve been building my dream project for almost 10 years. Often around the work that paid the bills.
After leaving my latest job, I took time to reflect on what I wanted next—and why this project still mattered enough for me to keep coming back to it.
condomera.com is coming with a lot more. Stay tuned.
Ricardo Vargas / Software Engineer retweeted
62K people saw "PHP 8.5.12 security patch is incomplete." Fewer read the bottom of his own screenshot: both PHP2Shell CVEs are genuinely fixed.
The claim is about three other paths that may still work on 8.5.12. He says it needs validation, and PHP hasn't confirmed anything yet.
It has happened before. In 2012 PHP had to ship a second fix after its first patch for a critical PHP-CGI bug didn't hold.
So don't roll back. Patch now and watch for the next release.
Leaving this here, PHP 8.5.12 security patch is incomplete. ( needs further validation )
Readers added context they thought people might want to know
Unvalidated AI output (author admits in replies: omp with glm5.3 + ds4), not a lab result. Its screenshot says both CVEs are fixed; the 'surviving paths' need unserialize() of attacker data or an app LFI. Patch per php.net: php.net/archive/2026.p…
Ricardo Vargas / Software Engineer retweeted
Good news everyone!
The absolute legends @ the Sury php mirror have backported the patch all the way back to 5.6
Ricardo Vargas / Software Engineer retweeted
Critical PHP vulnerabilities to be disclosed tomorrow: php.net/archive/2026.php.
We're working directly with the PHP Foundation to get patched PHP versions into our base images for Laravel Cloud, Forge, and Vapor ASAP.
You may need to redeploy your apps at that time to use these patched versions, but we're also working on the ability to silently patch applications without needing a redeployment.
All customers have been emailed and we will be providing further updates via email as the situation evolves.
Ricardo Vargas / Software Engineer retweeted
I found a CRITICAL auth bypass in Laravel 🚨 (9.2/10)
On MySQL/MariaDB, Laravel's token API guard let an unauthenticated attacker log in as an existing victim user.
Patched in 12.68.0 & 13.29.0.
Thanks to the @laravel team & @taylorotwell for the fast fix 🙏
More info 👇
