@nicksdot

Been throwing code into editors for 20+ years. Automating things. PHP contributor. World citizen. Migrant. Annoying. Tweeting for myself.

nicksdot.dev
Joined May 2009
  • Tweets10K
  • Following308
  • Followers611
1.3KMedia
🎉 Introducing `refactorlah` CLI -- fully open source. Agents are surprisingly bad at renaming/moving files. They are doing `git mv`s, then dozens of `grep`s, then hand-editing imports/namespaces/references while burning tokens and wasting time on tiny refactors. The `refactorlah` CLI gives them one boring command instead: `refactorlah move A B` or in bulk `refactorlah move --use-list A,B tests/A,tests/B` Then file/s are moved, and namespaces, imports, references, etc. automatically updated. Ambiguous renames are skipped and reported, so the agent can follow up manually instead of guessing. Support for Go, Python, PHP, Symfony, Twig is landed. A PR for JavaScript, TypeScript, Vite etc. is open. I built and dogfooded `refactorlah` over the last few weeks. It works better for me than keeping an MCP server running in an IDE or making agents struggle through long tool-call chains for basic moves. Still in alpha! Experimental, built with my best buddy Codex, and still dogfooding. More eyes -> more dogfooding -> releasing early. What do you think?
7
3
3
13
3,305
A bloody cyber expert knowing PHP, the language that runs the web, would already be enough. Not asking much, really.
Alex@mnmldmg6h
He’s a journalist, not a developer. He’s not doing code reviews, he’s covering the news. What else do you want him to be familiar with, closures, loops and object types?
3
47
1,343
we made it into "Today's News" on Twitter @paulmichaeldev lmao. 😆
1
7
598
You gotta be kidding me.
Paul Michael
@paulmichaeldev13h
No wonder people think PHP is dead. Turns out... nope.
185
525
139
9,875
340,086
This blew up. 😅 Anyway, if you work at a company that makes decent money off of PHP tell your boss to consider sponsoring the PHP Foundation: @ThePHPF 💜
2
5
76
16,379
Imagine you are spending moths on cracking SSL certs and eventually look at a '4'.
141
Rich guy who cheaps out with 4 subscriptions instead of paying API prices is mad that plebs get resets.
geoff
@GeoffreyHuntley21h
Replying to @NicholasBardy @OpenAI @claudeai
all these resets done by @thsottiaux is destroying the brand of openai. it turns the brand into $2 bargin basement option.
1
1
138
How likely is it that no one in 20 years has been using the PHP vulnerability? Someone out there is probably pretty pissed. 🫠
1
2
1,871
Hetzner sent out a reminder to dedicated and cloud server users, to remind them that security is on them. Mail sounds like they talk to someone who runs root servers by accident. First I laughed, then I remembered vibe coders.
1
1
155
My Codex usage is back to normal. Kinda expected I was one of the 40,000 affected accounts. But I did not get any mail or credits. So I guess I got just ripped off undetected for a few days. It's fine. 🫠
1
124
Spent two full days on PHP security. One day emergency work, another on some additional hardening. That's 2 days for 2026. It's almost November. Two days are roughly 293 days less than what average Node devs spent on supply chain attacks this year.
1
3
78
You know that when you wanna tweet something but you do not coz you do not wanna jinx it? 😆
1
56
Nick e/code retweeted
Ondřej Mirtes
@OndrejMirtesOct 21
Of course it'd be better to have vulnerability in PHP at all, but I'm deeply moved by today's events: 1) The absolute profesionalism of everyone involved from @ThePHPF. Thank you! 2) The number & size of sites went off-line at 2PM UTC to patch their servers. PHP totally runs the world! 3) PHP in news reports in press and TV across the world.
10
32
3
391
20,670
The comments below this are hilarious. Japans PM is confusing the whole country by tweeting about the PHP CVE. 😅
高市早苗
@takaichi_sanaeOct 21
皆様に、今夜に対応して頂きたい大至急のお願いです。   多くのウェブサイトで使用されているPHPに関し、PHPのセキュリティチームが、重大な２件の脆弱性に関する注意喚起を行っています。   公開しているウェブサイトでPHPを使用しているか確認し、今夜、10月21日午後11時（日本時間）に公開される修正パッチについて、可及的速やかに適用できるよう準備をお願いします。   修正パッチを速やかに適用することが困難な場合は、例えばウェブサイト等を一時的に停止させることも、リスクを低減させるための有効策の一つと考えられます。   国家サイバー統括室のXアカウントでも関係する情報を発信していますので、そちらも参考にして下さい。 国家サイバー統括室(注意・警戒情報)（@cyber_forecast） / X
1
141
PHP btw :)
Internet Archive
@internetarchiveOct 21
Archive.org is currently offline. We are working to restore service now.
1
83
We are so back; all done. Please do not break the internet while I am asleep. Thnx bye.
2
50
They even released patches for no longer supported PHP versions. Absolute legends.
1
10
249
The PHP security fixes including their tests. Not small.
1
9
254
My servers are slowly coming back. Fastest was Hetzner. It's awesome to see how good the ecosystem works. Thanks to everyone involved. 💜
Nick e/code
@nicksdotOct 21
Amount of domains I've sent to temporary sleep this morning. Will be a stressful day. Good luck everyone. 🥷
1
3
136
Load more