It can only happen if all three of these are true:
a. The PHP config sets session.serialize_handler to php_binary or php_serialize.
b. The app switches it back to php at runtime with ini_set() before calling session_start().
c. session.upload_progress.enabled is still on.
URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches thehackernews.com/2026/10/ur…
Charly@CSDevAr retweeted
Replying to @SamokhinAleks
Maybe time for all these sites to finally update to modern PHP versions.
But I think there are patches by now xitter.cf/schizoduckie/status/21…
Anthropic unveils Claude Duet AI agent app - OpenClaw again ?share.google/eckhdxhm0c7yoDZ…
Charly@CSDevAr retweeted
Okay, since the news is already out: an RCE vulnerability in PHP core, CVSS 10.0. Further details are scheduled for release on October 20. Only PHP 8 will receive patches.
Charly@CSDevAr retweeted
Replying to @InstantAIPrompt @johnsnails
Our team has successfully deployed security mitigations across all servers, covering all supported PHP versions, no actions are required from your end. We are closely monitoring the situation and will implement further updates immediately if necessary.
Charly@CSDevAr retweeted
Vibe coded my parents' TV this afternoon!
It was showing a sponsored ad before you could even get to Netflix.
Gave Claude Code the model number, it found the TV on wifi, removed 25 Xiaomi packages and wrote a new launcher.
Looks like an Apple TV now lol
Redirects in WordPress - another thing that can become a nightmare. A million 301s, redirect A to B, then B to C, then ... Z to A, and you delete something in the middle.. Where was I?
My first ESP8266 in use! Had it for years (NodeMCU 0.9). Got me a DHT22 temp sensor, a tiny 0.9 Display and vibe it, baby. Wifi endpoint! Of course, the eternal problem is the case, with the RPis, same thing. This temp cardboard box will be forever prolly.. Fun!
Source: CNX Software
share.google/GcpcwGaD5OyTWf7…
Charly@CSDevAr retweeted
Your security plugin can't save you when the malware IS the plugin update.
Rank Math PRO 3.0.123 was compromised for ~11 hours. Clean version is 3.0.124:
rankmath.com/kb/pro-3-0-123-…
Supply chain is the attack surface now. How do you vet updates?
Here's my quirky Intel Stick (1st gen). Atom, 2gb RAM, came with win8 (unusable). Now with ubuntu headless does Kodi fine, but let's run a rust-bult librespot. The RPI3 is faster :D but with the adequate supply and a FiiO K1 DAC it's delivering over the 74 Sony Amp!
Gemini doesn't understand, this is - not very well written (this is AI Grammar, yeah we're doomed :D ) but still Claude would understand! The AI here repeats the same thing I said. And yeah, it's very usual..
Now that Twitter is missing a bit of those encouraging posts, we can go the other way and be snuggily losers -
Of course Gemini says yes! Even more if you pay the Pro Plan! :D
More than ever for AI, strong API Servers are needed: Spotify (Premium, fair) is good, although it can't expose all devices. Mercadolibre removed API search (I guess so people are forced to their ugly site search). Google won't expose task times and mixes up calendar entries.
Claude's equivalent to "If you wanna die, go ahead, you idiot" :D #PassiveAggresiveAI
Playing around with the rpi and now a ESP8266 mini board. No soldering please I'm a lego kid. So everywhere (thanks AI, mostly there) I see "use Dupong female to female cables" but I *need* to see them. One guy in YT shows it. Let's not gatekeep! :D youtube.com/watch?v=uYf7vFRE…
This looks like a good thing to try.
share.google/aimode/FPGqU0jp…
Claude Remote Control or.. directly from the phone/ssh server. Intriguing concept especially if you lose power!
























