Peham Raza (@pehamraza) profile picture

Peham Raza

@pehamraza

15 years of killing bugs now spawning agents

peham.dev
Joined September 2009
  • Tweets26.9K
  • Following2.9K
  • Followers2.2K
410Media
Photo by Peham Raza (@pehamraza)Photo by Peham Raza (@pehamraza)Photo by Peham Raza (@pehamraza)Photo by Peham Raza (@pehamraza)Photo by Peham Raza (@pehamraza)Photo by Peham Raza (@pehamraza)Photo by Peham Raza (@pehamraza)Photo by Peham Raza (@pehamraza)Photo by Peham Raza (@pehamraza)Photo by Peham Raza (@pehamraza)
Ai was suppose to save time, but for some it has caused more responsibility more work and more time spend
James V (@james_mtc) profile pictureJames V
@james_mtcNov 7
Replying to @theo
I used to think the real gap was 4-5x, never 10x. But I’m pushing 90-120 PRs a week with lower bug rates now. I don’t want to hire anyone else…they’ll slow me down. ¯\_(ツ)_/¯
23
Tai's right, and I want to show why. I know companies that moved their entire engineering teams here. When the system fails Pakistanis, they don't wait for a fix. They build their own. A few examples I wanna add
Tai Lopez (@tailopez) profile pictureTai Lopez
@tailopezNov 7
Pakistan is probably the best place for your offshore workers. I’ve hired from almost every country on earth since 2001 and Pakistan wins by a lot.
1
37
more replies
Pause on that. Power crisis -> people built their own grid, one rooftop at a time. Fuel crisis -> they switched to electric. Few local jobs -> millions went global online. Nobody waited to be rescued. That's resilience. And it's the hardest skill to hire for.
1
4
Unapologetic plug: what this means for you is a team that adapts fast and fixes problems unprompted, at a fraction of the cost. I've built for US companies from Pakistan for 10+ years. My team handles design, build, marketing and support, faster with AI. Let's talk!
8
Peham Raza retweeted
hannah (@erhannah) profile picture
hannah
@erhannahOct 30
Image from hannah (@erhannah)
14
256
14
1,766
39,064
‼️ A GitHub user with no membership, invite or role at Dodo Payments deleted one of its private repos, co-founder Ayush Agarwal says. The audit log he shared shows a single repo.destroy from the GitHub CLI. It is missing from deleted repositories, so he cannot restore it.
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
40
38
16
798
86,099
Peham Raza retweeted
Bala 🧤 (@BalaiBB) profile picture
Bala 🧤
@BalaiBBOct 25
a developer just put $2,000 in bitcoin on a server with the PHP vulnerability and dared the entire internet to steal it 17 hours later the money is still there people are crashing the server but nobody can actually pull off the exploit remember when i posted about marcus hutchins calling out all those fake AI-generated exploits on github? this is the proof the vulnerability is real. but actually using it is a completely different story $2,000 sitting on a broken server and the whole internet can't touch it
International Cyber Digest (@IntCyberDigest) profile pictureInternational Cyber Digest
@IntCyberDigestOct 25
❗️ A developer hid a Bitcoin key on a PHP server left unpatched against PHP2Shell, the critical flaws fixed on Oct 21, and dared anyone to steal it. 17 hours on, the wallet holds ~$2,000 and nobody has taken it. The developer says someone is crashing PHP but "still no RCE yet".
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
42
136
12
1,218
108,193
Peham Raza retweeted
Asep Bagja 🍍 (@bepituLaz) profile picture
Asep Bagja 🍍
@bepituLazOct 24
Vibe coder: prompt -> app release -> 0 revenue Software engineer: Rent vps -> prompt -> build their own software factory system before build the app -> write hundreds of markdown spec -> thinking of scalability from day 1 -> mocking vibe coder -> app release -> 0 revenue
Michael Trinh (@_mctrinh) profile pictureMichael Trinh
@_mctrinhOct 23
If nobody reads code anymore, what separates a software engineer from a vibe coder?
66
394
45
4,253
89,202
Peham Raza retweeted
ThePrimeagen (@ThePrimeagen) profile picture
ThePrimeagen
@ThePrimeagenOct 23
Hey Its Friday * OpenCode Hacked * php screwed the internet * node said hold my beer * ruby said hold my beer * curl said hold my beer and eMudhra held that beer * Railway said hold my beer * OpenCode again helluva week and I only mentioned literally 1/2 of what I know about
208
242
29
4,712
127,130
Dont just blame PHP
Josh (@CryptoWorldJosh) profile pictureJosh
@CryptoWorldJoshOct 23
🚨 CRITICAL SECURITY ALERT PHP, GitLab & Node.js were already facing serious security vulnerabilities. Now, Linux, Python & Java are also in the spotlight. The potential impact across the tech stack is huge.
52
Trurerer
Nikita Bier (@nikitabier) profile pictureNikita Bier
@nikitabierOct 22
There is nothing to worry about. Nothing important is run on PHP or old software—except the water & electrical grid, a few government services like our missile defense systems and a handful of electrified fences at the zoo (for the lions, tigers and cobras).
30
Lol
ThePrimeagen (@ThePrimeagen) profile pictureThePrimeagen
@ThePrimeagenOct 22
There must exists an app with PHP, deployed on Railway, with calls to cURL, with other services written in node that use Brotli compression running on a couple day old Linux, with their code self managed on GitLab They are having a hell of a week
39
Peham Raza retweeted
Nithur (@NithurM) profile picture
Nithur
@NithurMOct 23
‼️ BREAKING: Two critical vulnerabilities have been identified in Angular. Google told all four apps using it to temporarily take the app down until a patch is available.
12
55
11
725
59,313
Set session.upload_progress.enabled=0 till next PHP release to block an unlikely RCE vector (CVE-2026-115560). Already recommended for CVE-2026-109619 Wed, keep disabled. Only apps with non-default serialize_handler switching it to "php" at runtime can be affected. #php #phpc
52
903
151
2,846
411,400
Load more