Sam retweeted
Interesting debate the other evening. If the cost of building nears 0, should PMs still shudder at custom feature requests? My view, yes, the answer to custom feature requests in the AI age is to build the product for customisation, not the process for it.
Security release pre-alert:
We will release new versions of Node.js 22, 24, and 26 release lines on or shortly, after 2026-11-11 in order to address security vulnerabilities.
The highest severity issue fixed in this release is HIGH.
nodejs.org/en/blog/vulnerabi…
Sam retweeted
We have discovered a substantial number of vulnerabilities in the German legal system using LLMs.
These may enable access to confidential documents, travel without an otherwise required visa, enforceable leave for soldiers at NATO’s JSEC, and more.
Similar to computer systems, the written law can contain vulnerabilities that invite exploitation. In our blog post, we share a selection of vulnerabilities, and present potential exploits for each. To our knowledge, none of these have been previously recorded. We share only those vulnerabilities whose exploitation we believe would not cause serious harm.
blog post: felixringe.com/legal-exploit…
Sam retweeted
We are preparing a security release for Better Auth, scheduled for Tuesday, November 3, 2026.
The related advisories will be published on GitHub Security Advisories at the same time.
Learn more: better-auth.com/blog/securit…
Sam retweeted
Not just PHP. Node.js has also announced security releases for October 21, with HIGH-severity vulnerabilities affecting its 26.x, 24.x and 22.x release lines.
If you run either stack in production, keep an eye on official advisories and apply patches promptly.
Security maintenance doesn't stop at your application code. Your runtime matters too.
Node.js advisory: nodejs.org/en/blog/vulnerabi…
Sam retweeted
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
Sam retweeted
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
Sam retweeted
Critical PHP vulnerabilities to be disclosed tomorrow: php.net/archive/2026.php.
We're working directly with the PHP Foundation to get patched PHP versions into our base images for Laravel Cloud, Forge, and Vapor ASAP.
You may need to redeploy your apps at that time to use these patched versions, but we're also working on the ability to silently patch applications without needing a redeployment.
All customers have been emailed and we will be providing further updates via email as the situation evolves.
Sam retweeted
✨It’s here! First prototype of my Etmaal clock is done.
Kind of cool to see an idea (with a little help of Claude) turn into reality
Quality is so-so, as expected, the print lines are still visible. That’s why the base of the final product will be made out of a different material.
Measurements are on point 📐The second hand clock module fits like a glove
If you want to be notified when pre-orders open, check below 👇🏼
Sam retweeted
Replying to @sam_odo
i've fully converted to Claude only; 3 accounts, all Max 200
superset to coordinate many agents in parallel
Fable as my main man
brainstorm first, then `fluncle-rfc-writer` skill, then `agent-orchestration` skill
every night before bed, I run 2-5 sessions that orchestrate various RFCs overnight for multiple hours and file a bunch of PRs
in the morning, i check their morning briefs, and tell them to merge it all if they don't mention anything crazy
easy 20k+ lines of code merged before i had my first coffee 😂
skills: github.com/mauricekleine/flu…
automations: fluncle.com/status
there's a roster of nightly audits across design, copywriting, testing, security that file PRs that get auto-reviewed a couple of hours later, all Opus
Chat Control has been passed, even though a majority voted against.
This is because @EPPGroup used an urgent procedure that would require an absolute majority to reject it.
What a disgusting way of politics. Europeans will remember, and vote the EPP out in the next election.
Sam retweeted
Replying to @bourscheid
No, you don't get it.
He does not have $1 trillion sitting in cash, it is 99% stock in his companies.
To make that wealth liquid would mean selling all that stock which would swiftly destroy *both* the companies (Tesla, SpaceX, others) and the wealth. If he sold it all, he'd end up with maybe $100b max, several hundred thousand people would be out of work, the companies ruined and many of their suppliers also ruined.
Okay, but now Elon has $100b in cash, and can "solve the world's problems".
$100b divided by the world's 8 billion people is $12
If you were in charge, several of the most innovative industrial companies in the world would be destroyed, hundreds of thousands out of work, and space would again close to human civilization for another generation.
But everyone on earth could have one nice meal and you could revel in your altruism.
Sam retweeted
De toekomst van mobiliteit is aangebroken
FSD Supervised has been approved in the Netherlands 🇳🇱 & will begin rolling out in the country shortly!
Trained on billions of kilometers of real-world driving data, it can drive you almost anywhere under your supervision – from residential roads to city streets & highways
No other vehicle can do this.
We're excited to bring FSD Supervised to more European countries soon
Sam retweeted
Today we're launching Proton Meet: end-to-end encrypted video calls where no one can listen in, not even Proton.
Built on the same zero-access architecture as Proton Mail.
Try it free: meet.proton.me
Sam retweeted
I always was struggling designing App Store screenshots. You work on an app for weeks, sometimes months, and then it feels like an extra project on top of that, tbh.
I tried to find a good solution, but couldn't find any, so I built it.
Sam retweeted
please do this

































