Always Learning "Distance lends enchantment" 💻RC W2'23 🎙Fish Tales Podcast: https://nitter.gq/t.co/m3z9mdeyz1
Central NC
Joined February 2022
- Tweets239
- Following185
- Followers96
- Likes305
Lee Trout retweeted
If you run PHP anywhere, patch it today.
Two RCE bugs in PHP core, CVE-2026-109618 and CVE-2026-109619, both 9.2. Reportedly, every release from 5.4 up is affected. Fixes shipped this afternoon (UTC):
8.5 → 8.5.12
8.4 → 8.4.27
8.3 → 8.3.36
8.2 → 8.2.35
8.1 and older get no official release. Check your distro or LTS vendor for backports, or upgrade.
Two things people are getting wrong 👇
1/ Plenty of companies run PHP without thinking of themselves as a PHP shop. WordPress is PHP, and so is that admin panel, that status page, and the staging box nobody decommissioned. Check every host you own that answers to the internet, including the ones nobody has logged into in a year.
2/ The risk went up sharply when the patch landed (30 mins ago!). Details leaked yesterday, and a few attackers already had them. Cloudflare saw attack traffic at 07:43 UTC, hours before any fix was made public. Now the patch points everyone at the exact bug, and writing an exploit from a diff is a short job.
If you can’t patch in the next few hours, Cloudflare’s WAF rules block the known attack patterns, including on the free plan. They only help if traffic actually goes through Cloudflare, and attackers are already tweaking payloads to get past them. That buys you hours, so spend them patching.
Lee Trout retweeted
We're making @fencer_security available for free to help secure open source! @AnthropicAI @OpenAI and a bunch of other companies signed a letter asking everyone to fix their security issues, and we're giving back by ensuring Open Source contributors have good tools too!
Lee Trout retweeted
🚨 META’s head of AI safety and alignment gets her emails nuked by OpenClaw​​​​​​​​​​​​​​​​
>be director of AI Safety and Alignment at Meta
>install OpenClaw
>give it unrestricted access to personal emails
>it starts nuking emails
>“Do not do that”
>*keeps going*
>“Stop don’t do anything”
>*gets all remaining old stuff and nukes it aswell*
>“STOP OPENCLAW”
>“I asked you to not do that”
>“do you remember that?”
>“Yes I remember. And I violated it.”
>“You’re right to be upset”
LMAOOOOOOOO
Lee Trout retweeted
Ghostty is now a non-profit project, fiscally sponsored by Hack Club. mitchellh.com/writing/ghostt… I view terminals as critical infrastructure that should be stewarded by a mission-driven, non-commercial entity that prioritizes public benefit over profit. Ghostty is now that.
Lee Trout retweeted
Yes - 100%
I keep telling people "programming is understanding" - the computer is a machine that tests if your ideas are correct.
Once you understand a problem the program can usually be written pretty quickly.
Understanding a problem can take years. nitter.gq/potetm/status/93447449…
The essential bit is that developers understand that the value we provide is understanding itself. Not the artifact per se. (Though understanding w/o an artifact is potentially worse than vice versa.) nitter.gq/joeerl/status/93447253…
Lee Trout retweeted
Have a fantastic Django web app, but now want to streamline deployment and operations?
Then consider purchasing a ticket to @thecodewritesme's tutorial, "Django DevOps"!
2024.djangocon.us/tutorials/…
#Django #DevOps #DjangoConUS
Lee Trout retweeted
One of my favorite software engineering papers is Parnas and Clements, “A rational design process: How and why to fake it.” users.ece.utexas.edu/~perry/…
Lee Trout retweeted
Ooooohhh boy, this is a terrific question. I have written two closely related pieces,
* for engineers interviewing at a new company, on how to sniff out bad management culture: charity.wtf/2021/02/19/quest…
* how to tell if the co is rotten on the inside: charity.wtf/2022/01/29/how-c…
Hey @mipsytipsy a question for you:
If you're an IC & an Engineering Manager role has been opened for your team, how do you interview EM candidates who can potentially be your future boss?
How can you ask questions that show their true nature?
Lee Trout retweeted
Don’t be a loser and diddle on your laptop at home. Come diddle on your laptop on this fast paced energetic environment
Lee Trout retweeted
People are upset about their observability bills, and they should be. The value you get has become radically decoupled from the price you pay.
At best, price rises many times faster than value. At worst, the value you get DECLINES as your bill goes up.
honeycomb.io/blog/cost-crisi…
Lee Trout retweeted
Introducing DiffusionLight---a simple yet effective technique to estimate lighting from any in-the-wild input image. How? ... by inpainting a chrome ball into the image with diffusion models! (1/3)
paper: arxiv.org/abs/2312.09168
diffusionlight.github.io/
huggingface.co/DiffusionLigh…
Lee Trout retweeted
Many, many software companies are like this.
I don't know how they manage to maintain the public image of smart people working diligently, but self-delusion is a significant factor.
youtube.com/watch?v=yD2JaAnM…
Lee Trout retweeted
For studios looking to leave Unity, I put together a list of alternative engines. If you have experience with any of them, please leave a (respectful!) evaluation in the comment section to help other devs know what's out there:
computerenhance.com/p/game-d…
Lee Trout retweeted
I've been talking to god knows how many companies about security lately, and this seems key.
Security, IT and compliance -- the people responsible for interpreting regulations and setting policy -- *must* be organized under R&D, if not engineering.
Lee Trout retweeted
Are you a fan of #github? đź’»
This week our youtube short is “Using Tools to Stay Organized” from featured guest @thecodewritesme🤓 Watch & see how he thinks you & your organization can stay on track.
📽️ Watch here : youtube.com/shorts/LE8WZJEsq…
Lee Trout retweeted
Check out this magical lava lamp I created in @figma
Community file:
figma.com/community/file/120…