
I've joked for years about how I'll never touch PHP, and people have always told me that modern PHP is safe.
Using PHP is a liability.
Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information, follow PHP’s announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
sleitnick retweeted
I enjoy coding, I enjoy game design, I enjoy modeling, I enjoy putting it all together and see it come to life. I might be slow, and I might not be the best dev in existence, but I enjoy it. And I want to learn and improve.
If I fall behind, so be it. This is not a race.
I find it fun to make games, not for the computer to make a game for me. The process of creating IS the fun part.
It's so rewarding to whiteboard a hard problem and then come up with a solution. For my personal projects, that's what I'll continue to do; that's where the fun is.
If I felt differently, I'd commission work out, whether to a person or machine. Obviously in a professional context, the goal is to build a good product and that comes first. But in a personal context, I'm just trying to enjoy what I'm doing.
Working on new physics sim for Billiards. It's much better now, and supports sliding! The second playback is at 0.2x speed, and you can see how the '11' ball slides as it changes direction.
So... NodeJS somehow wins again? The JS ecosystem is a perpetual mess.
We are excited to announce that Deno is joining Cloudflare!
deno.com/blog/cloudflare
We need to ensure that we bump the camera forward enough that its distance from the ground is above the clip distance.
Thankfully this is a simple trig problem. By solving 'h', we figure out how far to bump the camera forward to ensure we are 'n' above the collided object.
Here's a fun problem: When trying to bump the camera forward to avoid intersecting with other objects (e.g. the ground), the near plane causes the view to clip. Watch the baseplate get cut off near the bottom of the screen.
Fun fact: I once emailed the devs of Flow to ask if I could make a Roblox version (this was like 10 years ago). They said: "No."
TIL: Furnace error codes are encoded by blinking. Mine is saying 33. In other words, I'm about to get robbed by an HVAC company
Control surface actuation demo. Maybe I'll get it to fly this weekend











