.@maria_rcks can u shitpost on railway and php and gitlab and node and ca and and and please i need something fun
cant this day finally end?
it keeps on giving
thehackernews.com/2026/10/cr…
Tin retweeted
Will die Php2Shell Sache ja nicht romantisieren, aber schön zu sehen, dass sich auf einmal alle für IT-Security interessieren :)
Tin retweeted
if this PHP vulnerability allows remote code execution, doesn't that mean we can use the vulnerability to auto-patch all vulnerable servers?
Tin retweeted
PHP changes are live. Start patching. php.net/archive/2026.php#202…
Huge thanks to coordinated work by @ThePHPF!
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
Maybe it's really time to leave PHP for good - even though I love it.. 🥲
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP. Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated.
For more⬇️
ncsc.gov.uk/news/critical-se…
Tin retweeted
Ich habe mir gemeinsam mit @hoodinformatik das AfD-Leak angesehen und mit den Hacker*innen sowie Menschen aus dem Umfeld der AfD-IT-Dienstleister gesprochen.
So konnten wir erstmals rekonstruieren, wie der Angriff mutmaßlich abgelaufen ist.
lilithwittmann.de/blog/afd-h…
Try out Kaneo on Android - iOS, FDroid and Play Store coming soon. (You could self-build iOS tho.)
github.com/usekaneo/kaneo/re…
Tin retweeted
Replying to @usekaneo
@usekaneo has an official CLI now!
One binary for macOS, Linux and Windows, you don't need Node, and it works with Kaneo Cloud and self-hosted.
Nice output in your terminal, plain JSON when you pipe it, so your scripts and agents can use it too.
Install command below 👇
Tin retweeted
My @what_the_stack talk is up 🎥
"I Stopped Throwing Errors and My Code Finally Works"
We've all shipped catch (e: unknown) {}. A Promise hides how it fails, so you guess.
This is @EffectTS_: errors as values, typed, compiler finally on your side.
youtube.com/watch?v=GEqdajwt…
Ayy!!!
Tin's first PR to Kaneo, back in March, fixed file uploads with umlauts in the name.
Seven months and 125 merged PRs later, he's built the Gantt view, i18n, Gitea sync, the MCP server, and Home and Inbox.
Kaneo wouldn't be what it is without him. Thank you @10xtin!























