Lead Full-stack engineer @WeWorkJP. Organizer @LaravelliveJP & @phptokyo 👉 Laravel Live Japan: https://xitter.cf/t.co/vWQ5zWfJMx 👉 Discord: https://xitter.cf/t.co/z9uEaYrDtr

Tokyo, Japan
Joined January 2022
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
設営完了しました! 🙌 会場で皆さんとお会いできるのを楽しみにしております! #vuefes
30
2
75
2,600
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
"The php2shell scare pulled PHP onto front pages worldwide, from Japan's prime minister to the NSA, and showed how much of the internet quietly runs on it." @mattstauffer phpnews.net/php2shell-php-re…
5
7
738
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
php vulnerabilities: time to clarify what really happened here's my conversation with @derickr, a member of php internals. we go through the full timeline and the facts watch here: youtu.be/5X5csEbmHqs?si=uAk7…
9
2
25
1,994
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
8
40
5
430
17,562
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
PHPで新たなRCE脆弱性CVE-2026-115560が判明したと。 設定でシリアライズ方式をphp_binaryまたはphp_serializeにし、実行中にphpへ切り替えるなど、まれな条件で影響するとのことで、緊急修正はなく、次回の通常リリースまでsession.upload_progress.enabled=0を推奨すると。
Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc
1
70
6
193
24,090
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
The PHP security team is advising everyone to set this config until the next patch: session.upload_progress.enabled=0 I’ll be cutting a release shortly where serversideup/php will do this for you by default ⚡️ php.net/archive/2026.php#202…
11
67
7
345
35,464
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
PHP security team: keep session.upload_progress.enabled=0 until the next bugfix release. It blocks a rare RCE path, CVE-2026-115560.
4
3
29
5,941
I tried the Helium browser today and at least my first impression wasn't too great
90
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc
42
792
135
2,520
295,442
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
1
4
40
2,990
So here is what I am going to do: 1. Begrudgingly give Dia a fair chance 2. Advance in creating my own browser 3. Stick to Chrome/Zen until I am satisfied with my own browser
1
198
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
The /dev/null mobile app (completely open source btw) is coming along Sent my first picture through it earlier. DMs work too
4
3
45
1,948
This is worse than what I was expecting them to do with it after being taken over by Atlassian...
We've decided to sunset Arc on December 22, 2026. That's not an easy sentence to write. We spent years building Arc and celebrating each and every release along the way: we have so much pride and love for what we made alongside the Arc community. Our priority is to deliver best-in-class security for our members. Keeping a browser secure takes constant, dedicated work that is only increasing in the age of AI. Dia was built from the ground up to meet today’s security standards, so that's where our engineering and security teams will focus moving forward. We've worked to make switching to @diabrowser as easy as possible for Arc members. Here's how: · Your passwords, bookmarks, extensions and history come over to Dia seamlessly. · Spaces, Folders, and Tab Groups are in Dia and import over with your data intact. · Dia now surpasses Arc benchmarks in stability, speed, and security. · The browser features you use in Arc are free in Dia, and the AI is optional. Thank you for using Arc, for pushing us to make it better, and for building alongside us. The team that made Arc is the same team behind Dia, and some of our most ambitious work is just ahead. We'd love for you to be there with us when it lands.
1
4
198
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
PHP2Shell explained. @wiz_io @galnagli @calif_io
3
141
2
801
41,691
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
#DailyResource News by Stephen Rees-Carter Laravel Security Notice: Critical PHP Security Release Read now at bestoflaravel.com/go/5491 #php #laravel #webdev #javascript #tech #resources #developers
2
5
229
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
Patched PHP runtimes are live on Vapor. Our guidance has changed, and we now recommend redeploying your apps. ◆ Native runtime on PHP 8.2+: redeploy ◆ Docker runtime: run a new deployment, not a redeploy PHP 8.0 and 8.1 won't get a patch. Upgrade to 8.2+ now.
4
7
67
9,863
David Ciulla 🇯🇵🇨🇭| Laravel Live Japan retweeted
Native runtimes are updated on Laravel Vapor. We are still working on an auto redeploy for Vapor and recommend redeploying yourself to get you on the patched secure PHP version quickly. All images are available including 8.3, 8.4 and 8.5. If you are not on a native runtime, you will need a new deployment, not a redeploy.
5
4
30
7,658