México 🇲🇽
Joined September 2011
- Tweets14.7K
- Following413
- Followers902
- Likes19.7K
Trying out this whole "building/learning in public" thing. Been on here for the last 15 years, yet never overcame 1k followers because I tend to be shy and inconsistent in posting.
But that's about to change 🙌🏾
Along with sharing more of what I do here, I will also be building @madincohq off the ground in public too.
Hey @kepano! I'm building a plugin that stores private attachments in S3 and references them in notes as myprofile://path/photo.jpg. Reading View and Live Preview work, but Bases/Canvas card covers stay empty, so I'm patching them through the DOM for now. Is there a better way to do this, or is it something you'd consider supporting?
Went to a few events at @MexicoTechWeek over the last few days, love to see the Mexican tech community being so active 🥳
I went to a few events and conferences, discovered a few sponsors and chatted with friends.
Didn’t expect it, but funnily enough this event really ended up being an eye opener for me on many things. 1/x
What the events taught me however is how other people, outside tech, choose to use this technology. They don’t know much about how it works, but they want to leverage it, now that it’s finally accessible, now that they don’t need to pay overpriced developers gatekeeping it.
It taught me what tools people use, what questions they ask, what kind of things they want to achieve and how they try to go about achieving it. And that inspired me so much.
It went directly in line with why I created @madincohq. Madinco is a small web agency aiming to help individuals, non profits, small and medium businesses do more with technology.
The idea was never to “get rich making websites”, but always to help people leverage tools to either help clients achieve their operational (logistics, processes) and commercial goals (marketing).
I am strongly considering cancelling my codex (ChatGPT Plus) subscription. I have just not been satisfied in the last couple months 🫠
It’s worse than babysitting. I just find the model actively bad, and it takes me more mental energy to work with it.
Was super excited to finally meet @EstebanBaldera and @diariosdeclau in person for the first time yesterday for @MexicoTechWeek 🥳
Super excited for @resend's new inboxes feature 👀
I was precisely waiting for something like that for a couple of projects so I can't wait to build on it.
Out of curiosity, is there any plan to support POP3/SMTP with them, or at least ability to redirect/set aliases with another regular e-mail? (cc @lauradotjs)
Mathieu Céraline retweeted
it’s 2026. build like you’re already going to get hacked, because sooner or later you probably will
collect less. only keep the customer data you actually need. anything you never store can’t leak
encrypt everything you keep. not just passwords and card numbers: names, emails, addresses, photos, uploads, all of it. if someone gets into your database or storage, they should find nothing they can read
delete what you don’t need anymore. old accounts, expired orders, stuff from years ago that nobody uses. set it up so it gets deleted automatically, not “someday"
don’t store tokens or api keys unless you really really really really have to. if you do, encrypt them hardcore or put them in a secrets manager. and either way, keep your encryption keys separate from the data they protect
basically: the less data you keep, the less you have to worry about when you get hacked
I don't personnally use Railway but today has felt to me like the equivalent of an atomic bomb explosion. And I feel like all of this is only just starting...
An urgent notice from the Railway team
blog.railway.com/p/security-…
Mathieu Céraline retweeted
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. cfl.re/488w8dc
Mathieu Céraline retweeted
One-click mitigation for php2shell vulnerability:
If you have Cloudflare in front of your PHP website, please login to the dashboard and click this button to make sure you are protected.
dash.cloudflare.com/?to=/:ac…
This reduces your risk but doesn't fix the vulnerabilities in PHP. We recommend updating PHP to a patched version.
Mathieu Céraline retweeted
At 14:00 UTC two critical security vulnerabilities will be patched in PHP.
These are extremely serious vulnerabilities affecting every PHP application on the web.
Laravel Cloud customers: we will begin automatically patching your applications as soon as the patch is released. No manual action is required.
Laravel Forge customers: you will need to manually update your server’s PHP version via the server’s Forge dashboard. If you are unable to update your server, it should be powered down.
Laravel Vapor customers: we will begin automatically re-deploying applications running on PHP 8 as soon as the patch is released. No patch is being released for PHP 7 -- immediately update all applications to PHP 8.