Eidolon

The most exciting thing at work is when I finally get to sit down and hand-write code carefully thinking about the people who will be maintaining it later

the SEO guys have figured out how to ensure their blogvertising posts end up in the google ai search results reliably. ewwwww

SPICY NOODLES

todays protip: if the cosmos is telling you your design/code/idea sucks, stop and listen. often i find that some chunk of code will throwup more than its fair share of bugs, or not integrate well, or not live up to its hype/cost/time. rather than resent it increasingly over time, take it as a sign

Oh okay Chainguard is done huh

please stop replying to game devs saying things like "well look on the bright side those laid off devs can start their own indie studios now" because eventually one of us is going to snap and "WITH WHAT FUCKING MONEY" would be a shitty last thing to hear before you die

I realized earlier that we're in for days of discourse about PHP being a bad language. no, all this proves is that C is the bad language.

I am learning all about what games and web services are quietly using PHP and very concerned

Advisories were released ~25 minutes before the patch time. Oh no. Oh dear. github.com/php/php-src/... github.com/php/php-src/...

this company is never getting a CA cert trusted again

WELL, I suppose I will see y'all in the morning

it has been a long time since a day this exciting in computer security

details leaked. this vulnerability is a full unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest yeah if anything deserves CVSS 11, this is it. this is CATACLYSMICALLY bad.

don't worry, php is only used for 70% of websites that use a server side language

laughing at the number 4 when i scrolled past some posts about php

In case anybody needs social proof/thinks I'm exaggerating.

You should probably use a password manager and unique passwords for every account as of about 2 hours ago

actually, 4 is a very hard to guess number, and is secure from modern attacks

The details are now public, as of two hours ago. bugzilla.mozilla.org/show_bug.cgi... The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits. All not-updated software can be MITM'ed now. IOT boxes that can't or don't update are now trivially MITM'able forever.

What could be more Halloween than a BAT? How about a bat colored like a JACK-O-LANTERN? Let's meet the Painted Bat (Kerivoula picta), also called the butterfly bat, native to SE Asia. 🦇🎃 (📷: MerlinTuttle.org)

This career is exhausting

next fest looking like the roblox front page rn

you know I knew the vibecode slop was getting bad but even *I* am getting constantly surprised by the sheer volume of it recently, and I knew it was a problem on github half a year ago

Can I See Everything?

Hire me to do graphics and/or game engine programming stuff, thanks

Today the second edition of Mastering Graphics Programming with Vulkan is out in the wild! We did our best to take the critiques from the first edition and improve. I really hope will help people understanding more and more rendering and have fun with it! www.amazon.com/Mastering-Gr...

i got bored and decided to crucify reddit

Bluesky notably chose not to say directly that this is a vibe-coding tool on Bluesky itself, but here is the text of their Twitter post. Just interesting to see the way they market themselves to different audiences.

"I PLEDGE ALLEGIANCE" https://bonequest.com/10073