PHP & simple coding apologist, UI Designer, Fractional CTO, Programmer, Server admin, Bootstrapper, Low latency Enjoyer. Creator of Zerolith, zl.css, y más

Utah, USA
Joined November 2022
Artillain ( Mr. Zerolith ) retweeted
15
469
3
4,903
49,126
Well that was fun to watch
2
223
Artillain ( Mr. Zerolith ) retweeted
10
391
6
2,747
22,014
Shigeru Miyamoto, on AI: "As computers and technology have advanced, individual design skills, such as a sense of layout, have finally come to the forefront. I think that's exactly what's happening with generative AI. We separate the act of creating something from the act of doing the work. When we want to create something, we make a big structure. Then we start working on it with our hands. From there on, it's the work itself. Filling in the empty spaces, finishing it neatly, and so on. The troublesome thing is that the work itself is enjoyable. That's why there's a sense of satisfaction in creating something. However, the scary thing is that if you become satisfied with the work, you might mistakenly think that you've created something good. In that sense, the more AI can do the work for us, the more opportunities we'll have to think about what's truly important, which is a good thing. Some past designs were created solely through copy and paste. However, those designs don't last. There needs to be an individual's intention to design something. It's about having an individual's intention and then having a computer assist with that task. No matter how far AI advances, it might eventually do everything, but I think there's still a lot we can do."
7
28
1,573
Artillain ( Mr. Zerolith ) retweeted
369
6
7,241
39,167
Artillain ( Mr. Zerolith ) retweeted
We have origin and/or "ingredient" labeling for most kinds of consumer products. It is an anomaly that software has not been required to have such disclosures. I think it's very reasonable to require AI use to be disclosed, as well as other information that may be relevant.
Replying to @mattworkman
Forcing developers to write a political statement to be used against them by the hate mob they’re helping organize is abhorrent.
89
74
9
1,367
41,291
You think some little CVE 10 can kill PHP? Have you seen the insanely dense layer of chitin on this boi as a result of initially being the least secure thing, and biologically overcompensating for it for a few decades? Cmon, man.
1
10
359
Bingo
I think we've discovered another critical vulnerability: CVE-2026-BURNOUT: AppSec Professional Exhaustion Severity: Critical (CVSS 10.0) Description: A vulnerability affecting security professionals exposed to a continuous stream of critical RCEs, zero-days, emergency patches, and Friday afternoon disclosures. Impact: Sleep deprivation, excessive caffeine consumption, and an inability to enjoy weekends. Attack vector: Reading security advisories. Affected versions: All AppSec professionals, regardless of experience. Mitigation: No known patch. Air-gapping may delay the inevitable. Total system collapse remains a possibility. 🔥
4
258
Artillain ( Mr. Zerolith ) retweeted
🚨 CONFIRMED: PHP has officially acknowledged another RCE vulnerability, CVE-2026-115560, affecting specific session configurations even after the October 21 patches. A separate issue, not a bypass of the original fixes. A patch is planned. We've updated our defensive toolkit: github.com/syhunt/php2shell-… #php #cybersecurity
14
84
16
348
36,367
Artillain ( Mr. Zerolith ) retweeted
Learn something this time. Don’t switch to another VC or private equity funded app with no published business model. The era of “trust us bro, we’ll figure it out later is dead”
damn we all saw this coming. we have a date now (sending this from arc)
1
1
21
853
It's your turn, PHP haters 🙃
Liked PHP2Shell? You’re gonna love Node2Shell. We reproduced CVE-2026-111497 as pre-auth RCE. On a vulnerable Node.js runtime, app.use(express.json()) is enough to expose your server to code execution through a single Brotli request. Patch your systems now! imperva.com/blog/node2shell-…
2
12
1,273
Believe it or not, another problem that traces not to the programming language but some C underlying it. Pretty common theme!
1
5
166
If you have not updated your llama.cpp in a few weeks it's likely you are missing out on massive gains on blackwell hardware. FYI.
1
2
167
A few days ago i talked about how most companies are paying for more externalities with AI than getting a measurable benefit.. I called a few of my clients and explained the problem with AI bots and pitched the idea of a security megaproject: - build a state actor-grade AI pentesting apparatus - completely remove wordpress as a vector by flatfiling it and re-engineer wordpress sites to fit - Finish building defense system that exceeds cloudflare's capabilities - Build system that identifies attack patterns and reports them with suggested remediations - Build system that auto-snipes entire ASNs based on long term collected reputation I told them this is is a moonshot and easily low 5 figures per client since we are pooling R&D. Also i must take some % of developer labor off their existing projects. So far i have 2 yesses and 1 maybe on getting funding for the mega project. I'm surprised by the reception - but it really is bad enough out there to justify the investment.
4
106
Artillain ( Mr. Zerolith ) retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
290
3,273
670
22,660
2,263,110
Artillain ( Mr. Zerolith ) retweeted
15
155
12
992
23,889
Just in case you needed a reminder, here is why half the internet still runs PHP.
125
218
32
3,080
312,764
The distinguished choice for the highly skilled, yet unusually impatient programmer
5
146
25,992
Artillain ( Mr. Zerolith ) retweeted
PHP isn’t the most sexy language, I give you that. Where I live in Belgium, government, school, hospital, help line, media, news, and what not websites are down. It’s not because we don’t often hear about it that it isn’t big. Usually, PHP simply does the job. Nothing sexy, nothing worth shouting about. Only on these rare occasions do you get a feeling of the true impact of the language.
37
73
12
713
41,058
Artillain ( Mr. Zerolith ) retweeted
🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell! Researchers are reporting a successful double-free trigger on the newly patched release. ⚠️ The official fixes may be incomplete. A crash alone doesn't confirm RCE, but this deserves urgent investigation. Don't assume you're safe just because you've patched. #php4shell #php #cybersecurity xitter.cf/_annieversary/status/2…
chat. chat... its not funny anymore
Readers added context they thought people might want to know
The original post has since been edited to specify that this was about an unrelated vulnerability that the user had discovered, not the recently patched vulnerability. fedi.katze.sh/@elise/1174793…
32
572
191
1,852
926,140