Just a web developer from Spain. Usually working with TypeScript and Node.js
Spain
Joined December 2025
- Tweets94
- Following35
- Followers4
- Likes133
Francisco Martín retweeted
Mi viejo es ingeniero de software y vino corriendo a la casa gritando que empaquemos todo
Que agarremos solo lo esencial antes de que se congestionen las calles
Mi vieja esta llorando despidiendose de los perrubis
PHP 8.5.12 may not have completely fixed the latest PHP security issue.
Security researcher Elise Boyd says a double-free crash still works on the patched version.
So far, it has only been demonstrated as a local command-line crash. There is no evidence that it can be exploited remotely, and PHP has not confirmed the finding.
Francisco Martín retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
Francisco Martín retweeted
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
Francisco Martín retweeted
Me: entering Japanese cat café.
employee stops me immediately.
Employee: One rule.
Me: Okay.
Employee: Orange cat bites people from France.
Me: I’m not French.
Employee: Good.
I sit down, cats everywhere, peaceful, adorable, therapeutic.
then gigantic orange cat jumps onto table, built like retired wrestler.
Cat staring at me aggressively.
Employee watching nervously from distance.
Me: I thought he only hated French people.
Employee: He improvises.
cat slowly pushes my drink off table while maintaining eye contact.
Me: THIS IS TARGETED.
small child nearby points at cat.
Child: That one evil.
Employee: No no, He just passionate.
cat suddenly climbs onto my lap, starts purring violently.
Me: …wait he likes me?
Employee shocked.
Employee: Impossible.
another worker comes over, then another, entire staff now observing me like chosen prophet.
Manager arrives.
Manager: He has never trusted customer before.
Me: What does that mean.
Manager bows slightly.
Manager: You must take him.
Me: TAKE HIM WHERE.
orange cat already asleep on me.
Employee quietly bringing adoption papers.
Me: I CAME HERE FOR COFFEE.
Francisco Martín retweeted
Muy interesante el testimonio que se recoge en este paper donde se presenta un nuevo benchmark de preguntas teóricas de física.
Cada pregunta le llevaría a un experto mundial en la materia un máximo de 24h, y con ellas se ha buscado medir el nivel de los modelos actuales.
Inicialmente GPT-6 Astra consiguió una muy buena puntuación cercana al 90%, lo cuál ya es sorprendente. Aún así cuando investigaron dónde se encontraban los errores que la IA había cometido, Astra insistía en que su formulación era la correcta, y que debía de haber algún tipo de error en los cálculos de los expertos humanos que habían diseñado esas soluciones.
Efectivamente lo había, la puntuación de Astra final fue del 98%
Francisco Martín retweeted
La nueva versión de mi sistema para gimnasios ya anda en producción en 100 gimnasios. Si usted va a uno y lo ve, tomele foto.
Francisco Martín retweeted
Frontend: el frontend es más difícil.
Backend: el backend es más difícil.
Cliente: cállense y trabajen.
Devs con trabajo: me vale madre.
Hector de León: vayan a tomar cerveza.
IA: su PR está listo.
Yo: oye pero no hay PR!
IA: tienes razón, me equivoqué, ahora si está.
Francisco Martín retweeted
La separación entre frontend y backend siempre me ha parecido forzada.
Todo es software, que el "cliente" interactúe con él mediante una web, o mediante una app móvil, o mediante comandos de voz, o mediante una cli, o si es una aplicación de escritorio... me parece una especificación más.
Cada capa (desde presentación hasta db) puede ser tan compleja como quieres que sea.
El frontend nunca será más complejo que el back porque vive en un navegador que es el entorno más limitado del mundo.
Las redes de procesamiento de tarjetas de crédito no tienen frontend, los aviones que despegan en un aropuerto no tienen frontend, los coches autónomos no tienen frontend.
El frontend está limitado únicamente a lo que un humano quiera hacer con una página web, y demandado solo por las ganas de romper las pelotas de un diseñador.
Tiene mérito, pero no es más difícil.
Francisco Martín retweeted
Might as well give voice to it!
Thanks to @Toro_Yuma for the idea!
