Enjoying life with climbing, sports with boards, mountain biking, traveling, photography, videography and software engineering @michilehr@mastodon.social

Heilbronn, Germany
Joined April 2009
Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc
49
903
151
2,842
403,167
The "we don't need to patch" starter kit.
20
20 years ago, #Symfony was publicly released as a #PHP Open-Source project. Thank you all for your support along the years.
46
100
13
956
31,518
I've been bringing this topic up with anyone I could get my hands on from PHP's internals for the last few years, looks like someone is tackling it! I think (🤞) this could have one of the biggest impacts on performance in PHP apps in a while Most PHP apps spend most of their time doing IO (not using the CPU). Except for N+1 problems, interacting with the DB is often fast. But calling APIs (via HTTP) can take a very long time. Very different orders of magnitude. Why? Because it establishes a TPC and HTTPS connection every time. That can take 100ms or 200ms (HTTPS is bonkers). On *every* request, because PHP (with FPM) recreates a connection every time. That's why switching to Laravel Octane or Symfony Runtime makes such a difference sometimes: by keeping the PHP process alive between requests, we can save these 100ms. Comparing that to what we save on the framework boot time, this is massive. The RFC proposes to share HTTP connections between requests in PHP-FPM: that's huge because it could bring some of these gains to all PHP apps out there, without having to switch to Octane/Runtime (and the downsides that come with it)
10
12
141
11,622
Michi Lehr retweeted
"The open source spirit: To let a billion lemons go unsqueezed. To capture vanishingly less than you create. To marvel at a vast commons of software, offered with no strings attached, to any who might wish to build." world.hey.com/dhh/capture-le…
106
264
101
2,412
218,457
Michi Lehr retweeted
So I'll reaffirm my wish that WordPress finds a way out of this mess. And Matt too. Even Automattic. I don't think people are irredeemable, and I know how stressful it can be to be under siege. But you have to stop digging to get out of a hole.
22
32
8
2,067
259,869
Europe – we need your help. Please sign this petition to create a pan-european legal entity and promote it as much as you can: eu-inc.org We got RIGHT NOW a once in a generation chance to improve Europe for startups. 🔥 We got 6 weeks until the new comission sets their work agenda for the years to come. Uniting the European startup ecosystems needs to be part of this agenda! The solution is known, it's just one out of hundreds for politicians. It's our job as industry to show how important it is. First co-signatories are people like @patrickc, @nzennstrom, @martinmignot, @MattClifford, @Taavet, Eléonore Crespo, @jobvo, @roxannevarza and many many more coming in the next weeks. Hopefully including you! ✌️ How you can help: - Sign this - Get your friends, your team, your investors, your portfolio to sign - Share this in your whatsapp, slack and discord groups - Get this in front of press, newsletters, and influencers eu-inc.org/ For Europe, for the next generations to come: Let's make Europe the best place for innovators. Uniting as one ecosystem is the first step - a pan-european ecosystem is the key here. Let's go!
81
380
110
974
200,158
The half-life of code is an interesting predictor of project quality. Linux, has one of the longest code half-life’s at 6.6 years. WordPress, less than 2. Every software change induces some risk. Repos with numerous "change bursts" have the highest incidence of defects.
110
537
73
5,680
479,675
fuck infosec influencers, bring this back
13
21
1
314
19,661
Rest in Peace Lord Vader
1,913
95,210
4,126
588,276
16,835,986
Do you know "ncdu" already? It's a little CLI Tool for Linux to interactively debug disk usage - should be installed on every server imho. "ncdu" sums up disk and inode usage per Folder and you can browse the folders interactive in the CLI.
1
2
6
519
Those developers comparing their throughput after @dhh posted his numbers and saying his software is too slow is a symptom of a very cooked part of our industry that develops in a vacuum, somehow isolated from the business. None of your throughput or performance matters by itself. What matters is what it costs to run, develop and maintain compared to how much revenue it generates. Mix in the likelihood of security relevant bugs or mistakes, how easy it is to hire developers for it and you got yourself a plan.
2
2
11
1,646
"Why fans of nuclear are a problem today" "France has lost more annual kWh from nuclear than Germany since 2011, which closed its plants." jeromeaparis.substack.com/p/…
36
why do guitar center’s POS look like a fallout terminal ??
158
218
226
6,322
1,048,931
🐧
Can’t make this up, my in-flight tv is already hacked on the way to defcon
63