Building @zxnstudio | Laravel | YouTuber | https://xitter.cf/t.co/OqpUmRLYNV | https://xitter.cf/t.co/RMVlZgolsu | https://xitter.cf/t.co/KTdwVxxHPx | Podcast with @techenby
United Kingdom
Joined October 2023
- Tweets2.1K
- Following590
- Followers1.3K
- Likes2.9K
Critical PHP Update | Make Ship Happen #10 xitter.cf/i/broadcasts/1RKZzBdQd…
ZXN Prep is out.
A menu-bar app for Mac that gets you ready to record in one click. It checks your mic, camera, window size and free space, hides everything else, and puts it all back when you’re done.
$9.99 once, or included with ZXN Studio.
zxn.studio/prep
This is my second product I'm shipping this week
ZXN Prep is out.
A menu-bar app for Mac that gets you ready to record in one click. It checks your mic, camera, window size and free space, hides everything else, and puts it all back when you’re done.
$9.99 once, or included with ZXN Studio.
zxn.studio/prep
Tilly The Coder retweeted
This week had it all: critical PHP vulnerabilities, a broken disclosure embargo, and a community rallying to protect production apps. The patch dance is real, and the drama? Even more so.
Grab a coffee and dive into the breakdowns, tools, and lessons that came out of one of the most intense weeks in PHP and Laravel history. Here are your top 10 ranked picks from Artisan Weekly Edition 107:
Tilly The Coder retweeted
@wiz_io You should SERIOUSLY consider updating this page to reflect that the foundation was already in the process of responsibly disclosing after reports from other parties.
This is doing serious reputational damage to a very hardworking, small team currently sitting at the end of an unending shit funnel.
Any paid submission on wirepackages.dev will now be served as an ad on article pages on TillyTheCoder.com which receives hundreds to around a thousand views per article a month. This is included, and only shows for non paying members on TillyTheCoder.com.
Tilly The Coder retweeted
If you're on @laravel Cloud and you're using Octane, you are not safe quite yet. They haven't had a chance yet to get the newly released (like 20 minutes old) FrankenPHP installed.
Tilly The Coder retweeted
Our dear friends at @laravel are being reminded that having lots and lots of monthly active users is good until all of those users try to hit the site at the same time.
Chin up. This will pass, and we'll toast your heroic efforts the next time we see you.
I updated my website today to the latest version. I’ve also gotten a brief article together just to increase exposure to the issue.
tillythecoder.com/articles/p…
Tilly The Coder retweeted
🚨 PSA
Worrying how the #PHP CVEs affect your NativePHP/SuperNative apps?
Good news:
*** NativePHP (by default) doesn't expose any sort of remote access to your apps ***
If you have explicitly added some form of remote access, you should take a closer look
Note: we don't yet have the full vuln details. Stay tuned. We are watching closely and will update as things develop
Questions? We're here. Reach out
Stay safe out there! 📱 🖥️
Tilly The Coder retweeted
🚨 This is important!
At 14:00 UTC two critical security vulnerabilities will be patched in PHP.
These are extremely serious vulnerabilities affecting every PHP application on the web.
Laravel Cloud customers: we will begin automatically patching your applications as soon as the patch is released. No manual action is required.
Laravel Forge customers: you will need to manually update your server’s PHP version via the server’s Forge dashboard. If you are unable to update your server, it should be powered down.
Laravel Vapor customers: we will begin automatically re-deploying applications running on PHP 8 as soon as the patch is released. No patch is being released for PHP 7 -- immediately update all applications to PHP 8.
Glad to see government organisations taking it seriously too. The more that knows the better. I’ll be updating all of my sites at 3pm with the patch
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP. Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated.
For more⬇️
ncsc.gov.uk/news/critical-se…
