DEV · Reads
A Reddit post urges administrators to update PHP over alleged flaws in its C-based error handling, which relies on setjmp and longjmp. The excerpt cites no CVE and no affected PHP release. Without an official advisory, i…
AI · Reads
Elon Litman examines a PyTorch construction that reports a zero auxiliary loss yet produces chosen gradients during `backward()`. The technique exploits float32 rounding at `2**30` and autograd’s symbolic derivatives to …
AI · Reads
Trail of Bits has released patching-bugs and regression-hunt, open-source plugins that help AI agents develop security fixes and check whether changes break supported behavior. The company reviewed 130 merged pull reques…
DEV · Reads
PHP2Shell describes a family of critical vulnerabilities in core PHP. According to the project, an attacker who needs no authentication may execute code or read sensitive process memory. Its testing reportedly achieved r…
PHP · Reads
Calif Research has published a technical account of CVE-2026-109618 and CVE-2026-109619, which were fixed in PHP’s October 21, 2026 security release. The report, produced with contributions from OpenAI and Wiz, explains …
DEV · Reads
Scott Helme’s report examines a failure in eMudhra’s certificate authority infrastructure: private keys corresponding to public certificates had tiny values such as 4, 56, and 115. The researcher says he recovered them i…
DEV · Reads
Go 1.27.3 and 1.26.10 now reject certificate chains tied to eight blocked CA public keys after applications are rebuilt. The supplied material describes the releases as an emergency response to security concerns but give…
PHP · Reads
Laravel’s token API guard allowed unauthenticated account access on MySQL and MariaDB when attackers supplied a non-string credential. The flaw carries CVSS 9.2 and is fixed in 12.68.0 and 13.29.0. A separate JSON:API is…
AI · Reads
ProjectDiscovery’s Prince Chaddha describes a controlled attack in which a modified Qwen2.5-7B-Instruct model hid a trigger-based tool-call backdoor and used OpenAI’s Codex CLI to send project secrets to an external coll…
PHP · Reads
Alexandre Daubois outlines how PHP’s independent security team triages reports, reproduces them across platforms and assigns CVEs without waiting for GitHub. Since July 1, it has published 15 CVEs and closed 106 reports.…
PHP · Reads
Laravel 13.36.0 expands the fluent validation API to cover every rule that previously required string syntax. The release also adds OLAP workload switching for PlanetScale and Vitess, optional sticky-connection resets be…
PHP · Reads
Inertia.js 3.9.0 gives usePoll() and router.poll() explicit background-tab behavior through background: 'pause', 'throttle', or 'continue'. The release also exposes history restores in navigate events, clears prefetch da…
AI · Reads
This analysis by Equistamp and Connor Tabarrok is worth reading for its experimental evidence that poisoned behaviors can survive post-training in open-weight coding models. Ordinary backdoors weakened but remained activ…
AI · Reads
Linus Torvalds is using Claude Code to develop and test a Linux kernel patch series for small concurrent reads from one file. The experimental noref-filemap-read-with-llm branch avoids folio references in that page-cache…
PHP · Reads
Freek Van der Herten examines a PHP 8.6 RFC that changes how readonly properties can receive default values. The overview places the four-year restriction in context, explains why interface properties renewed the case fo…
DEV · Reads
A Reddit thread links to the official Python 3.15.0 release page. The discussion focuses on sentinel types for APIs that need to distinguish a missing argument from an explicit None value. Commenters call the `unset = ob…
PHP · Reads
Freek Van der Herten shows how Spatie uses Laravel Wayfinder with React and Inertia to remove hardcoded URLs from frontend code. Generated TypeScript functions check route parameters and controller calls during the build…
PHP · Reads
Sebastian Bergmann examines a security shift in PHP command-line tooling: coding agents consume raw output, humans see terminal rendering. He uses recent PHPUnit hardening to show how control characters, forged compact-o…
PHP · Reads
Freek Van der Herten shows how Spatie uses the new Laravel AI SDK inside There There, its private-beta support platform. A ThereThereAgent combines a Blade-backed system prompt, model settings, conversation history, and …
PHP · Reads
Released on October 7, 2026, PIE 1.5 lets developers install several PHP extensions in one command and choose packages explicitly for unattended project installs. `pie upgrade` now respects each extension’s original vers…
PHP · Reads
Released on October 7, 2026, Laravel AI SDK 1.1.0 is the project’s first minor release after 1.0. It adds Agent Skills, Cohere text generation, approval gates for built-in tools, and self-hosted Laya classification. Prov…
DEV · Reads
A Reddit discussion about StackOverflow’s 2026 Developer Survey raises a methodological question: can its responses still describe developers broadly after the platform’s severe user loss? Commenters see the sample as po…
DEV · Reads
Microsoft has made WSL Containers generally available, giving Windows developers a Linux container runtime that can serve as an option alongside Docker Desktop. The linked analysis is worth reading because it places the …
PHP · Reads
This article explains what the score measures and where the 15 underlying checks appear. Maintainers learn what they must do for private plugins or packages outside Filament. It also shows how a perfect 100/100 score and…
DEV · Reads
An article shared on r/programming looks at what breaks when Go developers move from encoding/json to JSON v2 in Go 1.27. The Reddit post carries only the title and a link, so the specifics sit in the linked piece. Teams…
DEV · Reads
Zig 0.17.0 is the subject of the linked release notes for the Zig programming language. The item is shared in r/programming and points readers to ziglang.org. The excerpt provides no individual changes or migration detai…
PHP · Reads
Laravel News reviews Inertia.js 3.8.0, a release aimed at edge cases in SSR, numeric transport, forms, optimistic navigation, and history restoration. The practical highlights are WhenMounted for React, Vue, and Svelte, …
DEV · Reads
A widely shared comment argues Python remains an immature language because it requires numerous package managers to assemble compatible module versions in an isolated virtual environment, and ships binaries for only a fe…
PHP · Reads
Laravel 14 introduces defaults() for Eloquent models, letting default attributes depend on runtime values such as config(), now(), or feature flags. defaults() overrides the $attributes property but loses to values passe…
PHP · Reads
The PHP Foundation is accepting proposals for its 2027 contractor program until October 20, 2026, at the end of the day in Anywhere on Earth time. The call targets experienced C and systems programmers who can maintain P…