Robbie V

this php vulnerability is serious but also i am lmao at all the “i never liked php anyway” posts like it has allegations of malicious behavior. some of you need to come up with other ways to respond to news

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

I'm starting to put out feelers for my next job - if anyone I know is hiring :)

I propose we stop using the word “spider” and instead say “web developer”. Babe, I found another web developer in the bedroom.

TIL crossover cables are obsolete: techlym.com/auto-mdi-x-e...

Spent days getting Linux suspend to work reliably after switching out my motherboard. Long story short I disabled the bonus ASMedia SATA/USB controllers in the bios and that seems to have fixed it (200+ suspends without failure now).

We don't talk enough about the dangers of WhatsApp completely dominating in many places. I have kids and we have to use it or be left out. There's a parents group for school, there's a group for nursery, groups for after-school activities, groups everywhere. www.reuters.com/sustainabili...

I've realised that I'm a chiseler, if that's even a word. I work out a rough implementation that's terrible in most respects but works. Sculpting the rough shape of it. Once I've got something working I know enough to either start over or chisel until I'm happy.

I logged in to arbor-education.com to pay for my kid's school trip, only to be greeted by "Passwords last for 180 days, and yours has now expired.". So I had to change it immediately. I then had to enter my payment card info to pay for the trip. Probably the most dangerous thing I'll do this week.

this is an incredibly thoughtful post

Are you still hiding if no one is looking? People aren't reading the code at all—they'd see the weird decoder+eval—and machines can see that and also the private use code points. Also, it's been public since May 2025 and GitHub/NPM/Microsoft have done nothing. www.aikido.dev/blog/glasswo...

Vibe vs buy: you've never been paying for the code; you're paying for "someone else has thought this problem through in much more depth that I'm willing or able to"

Last year I quit my job after years of security engineering. Here's an idea I come back to a lot: How can I say yes? garbagecollected.org/2026/02/19/h...

*while npm install scrolls by on my terminal* incorporating code into my codebase? without reviewing it? that's irresponsible

Steam Phone when

"Your password is not included in this email for security reasons."

This reminds me of an incident at work some time ago where a JSON message grew over time and got so large the system started rejecting it. As a first dumb idea I thought we should check if it was pretty printing the JSON. And yep, it was. Literally changed a true to a false somewhere.

Found a bug in the prerelease version of the Ghostty terminal in some niche shell integration I'm using. I love those occasions on which you need a whole page to explain a 4 character change: github.com/ghostty-org/...

Goldilocks and the three beers

It's the year of Linux on the desktop for me (NixOS currently). Crazy how many tools I depend on are web apps or glorified web apps (native shells like Electron). I'm now launching some sites with "chromium --app" so they integrate better.