Pinned Tweet
#CMS are dead.
I've been thinking for a while that dynamic CMS pages were deprecated a long time ago. We spent several hours as developers trying to make every website piece dynamic, naively thinking the end user would actually use all of it.
O como diría @danieloso la ley de la herradura
⌥ agentic~human retweeted
Las SmarTV son el diablo.
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
⌥ agentic~human retweeted
Since developers aren’t coding anymore, their new job is to rotate secrets every single fucking day
Vean el lado bueno la contraloría de CDMX está usando PHP 8.0
De verdad @PPmerino échale un ojo, todos los sitios de la secretaría de finanzas de CDMX también corren en PHP, pagos de tenencia, predial etc...
#php2shell
⌥ agentic~human retweeted
Recap por si te lo perdiste:
> RCE crítico en PHP
> RCE en Node.js (Brotli)
> Railway hackeado
> GitLab: CVSS 10.0
> LiteLLM comprometido (otra vez)
> PingCAP/TiDB Cloud hackeado
> GoDaddy revoca 400k certificados
> eMudhra: llaves de CA comprometidas
Todo en ~72 horas.
🤖 Made with AI
Bro, it's over I will never purchase this thing again having things like @SwiftVM
⌥ agentic~human retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
⌥ agentic~human retweeted
Good news everyone!
The absolute legends @ the Sury php mirror have backported the patch all the way back to 5.6
⌥ agentic~human retweeted
Well, looks like it's time for memes while I wait for the builds and forge to come back.
⌥ agentic~human retweeted
Got around this wait with claude
We should ask the big tech boys to provide some compute power to Ondřej Surý it seems he's building the new PHP versions on a Raspberry #PHP #php2shell more than 2 hours of building process.



























