Just a web developer from Spain. Usually working with TypeScript and Node.js
Spain
Joined December 2025
- Tweets94
- Following35
- Followers4
- Likes132
Lo de que te diga que es de ASIR, que no sabe de programación y paso seguido te diga de usar React me tiene dando volteretas, como no vas a saber programar y vas a ponerte a usar React, cómo sabes que lo que estás haciendo está bien entonces?? XD
Si se almacena en la memoria RAM, sí. La afirmación de "99.99%" de Malware móvil no consigue persistir a un reinicio porque asume que todo funciona guardando en la RAM. También hay Malware que se almacena en ROM
Habrá que tomar medidas contra estos problemas, lo fácil es pensar que con otros agentes se revise en cuanto se encuentre el problema, pero no hay software perfectamente seguro, es muy posible que terminemos viviendo con eso
Ciertamente, lo que pasó con Cloudflare fue de peso, pero esto es diferente. Estamos hablando que están saliendo a la luz muchos errores de lenguajes e infraestructura en la que confiábamos.
También si lo miras por otro lado es bueno y significa que vamos a lograr más seguridad
La verdad es que es impresionante. Todos estos errores han permanecido ocultos tanto tiempo que es abrumador
Francisco Martín retweeted
Mi viejo es ingeniero de software y vino corriendo a la casa gritando que empaquemos todo
Que agarremos solo lo esencial antes de que se congestionen las calles
Mi vieja esta llorando despidiendose de los perrubis
PHP 8.5.12 may not have completely fixed the latest PHP security issue.
Security researcher Elise Boyd says a double-free crash still works on the patched version.
So far, it has only been demonstrated as a local command-line crash. There is no evidence that it can be exploited remotely, and PHP has not confirmed the finding.
Francisco Martín retweeted
This is the most serious 48 hours in cybersecurity history.
"Black October" they're calling it
It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*
SUMMARY OF THE LAST 48 HOURS:
YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):
1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan
MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):
11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached
Also serious:
24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea
Francisco Martín retweeted
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
Depende de tu localización geográfica en el país y cuánto ganes, lo que puedas hacer... Etc, por ejemplo, si estás en Andalucía, la cuota de autónomos es de 0€, pero si estás en Melilla por ejemplo, una sociedad tiene el IS en el 4% si no estoy mal
Francisco Martín retweeted
Me: entering Japanese cat café.
employee stops me immediately.
Employee: One rule.
Me: Okay.
Employee: Orange cat bites people from France.
Me: I’m not French.
Employee: Good.
I sit down, cats everywhere, peaceful, adorable, therapeutic.
then gigantic orange cat jumps onto table, built like retired wrestler.
Cat staring at me aggressively.
Employee watching nervously from distance.
Me: I thought he only hated French people.
Employee: He improvises.
cat slowly pushes my drink off table while maintaining eye contact.
Me: THIS IS TARGETED.
small child nearby points at cat.
Child: That one evil.
Employee: No no, He just passionate.
cat suddenly climbs onto my lap, starts purring violently.
Me: …wait he likes me?
Employee shocked.
Employee: Impossible.
another worker comes over, then another, entire staff now observing me like chosen prophet.
Manager arrives.
Manager: He has never trusted customer before.
Me: What does that mean.
Manager bows slightly.
Manager: You must take him.
Me: TAKE HIM WHERE.
orange cat already asleep on me.
Employee quietly bringing adoption papers.
Me: I CAME HERE FOR COFFEE.
Muchas personas que decían que "es el fin de los programadores" parecían más comerciales que otra cosa, algo ganarán con estar chillando todo el rato