Unless you're talking about @tobi's Shopify or another well run company - tech is exactly the same.
Just because some people made a webapp doesn't mean they're cutting edge technology with cutting edge ideas with engaged founders.
Princeps retweeted
“I have an undergraduate degree in English, I don’t know anything about the specialist subjects I am paid to write about”
this is far far worse than if he had said nothing
these people have absolutely no self awareness
Princeps retweeted
If your company refers to engineers as the IT department, you have nothing to worry about. You were already breached last week.
Finance journalists who stands up and insists no one had any idea what the yen carry trade was.
PHPGate has started. The PHP Devs demand competence in technology journalism.
Segfault of Akkad has started a YouTube channel.
Princeps retweeted
>junior dev at a mid startup
>wednesday morning
>just want to push a minor bugfix to our php app today
>open laptop, check slack
>company group chat is an absolute warzone
>CTO typing in all caps about php2shell
>fucking php
>whatever, server hasn't blown up yet, I just need to get my code in
>open gitlab to merge the PR
>forced emergency logout because of a critical gitlab security patch release
>fucking gitlab
>pipeline fails because of some weird regex compiler bug
>spend 40 minutes fighting CI/CD
>i can just use AI to help debug
>fire up opencode
>api keys nuked because they were breached
>fucking opencode
>i’ll just get fresh LLM api keys from our corp proxy, LiteLLM
>it won’t connect? It’s down?
>look up LiteLLM news: supply chain compromise
>fucking litellm
>cold sweat forming
>slack alert: db connection error
>check our database connection
>we host on TiDB Cloud
>they just announced a security breach, unauthorized access via stolen service account credentials, data copied
>fucking tidb cloud
>full panic attack incoming
>figure fuck it, just ship the container to Railway and go home
>open Railway dashboard
>bright red banner: "Security Disclosure: Rotate all environment variables immediately. All builds paused."
>fucking railway
>try to open the app URL in browser to see if anything is even working
>NET::ERR_CERT_AUTHORITY_INVALID
>eMudhra intermediate certificates compromised
>4
>instantly untrusted by every major browser
>fucking emudhra
>stare blankly at mac screen for 10min
>random pop-up
>restarting in 10min to fix a critical vulnerability
>fucking macos
>close laptop
>leave office
>never come back
If you have any kind of payment processing on your PHP site - regardless of if you use Stripe or any other method to defer CC on your server, act now before you get pwnd.
You can easily end up capturing CC details on your service, and become Common Point of Purchase.




















