This was the worst week to be a developer 😵‍💫 If you've deployed anything, read this 👇 PHP2Shell (9.2): Unauth RCE in PHP. UK took 30+ govt services offline. Update to the latest patch NOW. Node.js: Brotli decoder RCE. Update to 22.23.4 / 24.22.1 / 26.12.1 and restart. GitLab: Max severity bug affecting installs since 2014. Patch it. LiteLLM 1.107.0 was malware for ~2 hours. Stole SSH + cloud keys. Pin 1.106.2 and rotate everything. Railway breach: Some customer secrets may have been decrypted. Rotate API keys + DB passwords. OpenCode Console: Linked OpenAI/Anthropic/Google keys leaked. Some people got $1000+ bills. PingCAP: 10.6 TB claimed stolen. The cause? Credentials committed to the repo 🫠 Linux kernel: Two 9.0 RCE bugs leaked publicly on the mailing list before patches shipped. Lesson: Keep .env out of git, pin your dependencies, rotate your keys.

are you fucking kidding me? pikzels.kumar-coding.dev/

DEVS, WHAT IS PLAN B if the model writes better code than you in six months?

they are calling it the worst Gmail error of all time

📣 Gemini 4 Argon is here! Built to solve your hardest problems, Argon excels at real-world software engineering, enterprise workflows, cybersecurity defense, and scientific reasoning. By reliably handling routine tasks like everyday debugging to complex problems like codebase migrations, it frees developers to focus on architecture and product innovation. See what you can build with Argon ↓

I resigned from Anthropic today. I spent the last three years doing pretraining research at both OpenAI and Anthropic. Neither company is acting responsibly. They are racing straight to self-improving superintelligence and gambling with our lives. More thoughts below.