I also noticed @rasmus bio says “Breaking the Web.”
That bio aged rather well given PHP2Shell 🤣
"That was getting pretty tedious, I'm not that interested in programming, it's kind of tedious and boring, so if I could reduce the amount of time I had to spend programming and maximize the output and get to the solution quicker - that was my goal with PHP"
Something tells me @rasmus would have loved vibe coding 30 years ago.
"That was getting pretty tedious, I'm not that interested in programming, it's kind of tedious and boring, so if I could reduce the amount of time I had to spend programming and maximize the output and get to the solution quicker - that was my goal with PHP"
Something tells me @rasmus would have loved vibe coding 30 years ago.
No. I think AI will eliminate entire classes of bugs, probably faster than most people expect. But the idea that we will stop shipping security vulnerabilities entirely by mid 2027 seems extremely unlikely.
Take seL4, one of the best examples of formally verified software. You can mathematically prove code behaves according to its specification, but that doesn’t mean the entire system is secure. There are still assumptions about hardware, architecture, configuration, and everything else.
Even when AI is designing the entire system, those assumptions still exist. And the same advances in AI that make systems more secure will also make attackers more capable.
Cybersecurity isn’t like translation, where you can eventually approach some ceiling of performance. It’s an adversarial problem, and I don’t see that arms race ending any time soon.
Will the models stop writing code with bugs by mid 2027?
xitter.cf/BVeiseh/status/2113389…
Yes. This is only the beginning.
hey @grok can you please read the source and backport this fix for all versions. Thanks. Oh, also, make no mistakes.
github.com/php/php-src/secur…
Hey @levelsio you okay bro? Can someone do a wellness check?
Thanks Dane, Cloudflare has always been a huge shield for the public. Appreciate you all so much.
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
So many message boards are going to get pwnd 🫣
if this affects the default installation of PHP
We are fucked up
CVE-2026-109618
CVE-2026-109619
PHP RCEs with a CVSS score of 10.0 ☠️
news.ycombinator.com/item?id…
This is a huge problem. It started with cloud providers abstracting infrastructure. Now people are outsourcing their ability problem solve. I’m seeing it firsthand with candidates and junior engineers who struggle with even the most basic tasks without turning to an agent.
Outsourcing your complete ability to troubleshoot is going to be a problem.
xitter.cf/rootsud0/status/211187…
“Outsourcing your complete ability to troubleshoot is going to be a problem.”
Using agents is fine, in fact, it’s the future. Not understanding, at a very basic level, the thing you are troubleshooting, is a recipe for disaster.
Imagine having a doctor or surgeon that doesn’t know basic human anatomy responsible for doing a procedure on you. Would you be comfortable with them asking basic questions like “What's going to happen if I cut this artery?” while you are laying on the operating table?
The problem isn’t using AI. It’s becoming so dependent on it that you lose the ability to recognize when it’s wrong.
There is something beautiful about watching a car perform maneuvers you would normally associate with a spacecraft. The collaboration between Tesla and SpaceX is a remarkable example of what happens when brilliant engineers come together to rethink what’s possible!
Did you know you can use Grok Bot to reserve the Tesla Roadster, pay the deposit, and even wire the funds directly through X Money?
There is something so incredibly magical about the way SpaceX rockets light up the sky. The space jellyfish is one of the most beautiful things to witness. What’s even cooler is the science behind it. The rocket’s exhaust expands as the atmospheric pressure drops, and when sunlight hits that plume high above the Earth while it’s still dark on the ground, it creates these incredible glowing formations. Just an amazing combination of physics and engineering. Never gets old.
