Hard work pays but smart work pays better. 😉

Software has always been about learning to use tools and patterns and I don't that has changed with AI. I always found curiosity to individually learn as the key quality of a software engineer.

AI chats needs to be full of dynamic UI to make it quicker to understand and make decisions.

Hello,

At 6:32 a.m. PDT we became aware of malicious LiteLLM 1.107.0 artifacts published to PyPI, Docker Hub, and GHCR, which were published at approximately 4:40 a.m. PDT. Enterprise deployments pulling only from our private registry are unaffected by this incident.

We are coordinating communication around this incident in this GitHub issue (github.com/BerriAI/litell…).

We have removed the malicious releases and images. If you installed or ran them, please follow the remediation guidance in the above-linked issue and treat credentials accessible to those deployments as exposed.

Sincerely,
Oliver Jensen
Director of Security - LiteLLM

Oct 21 will be remembered in history

Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially data and networks.

The FBI urges organizations to take the following steps now:

➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.

➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.

➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.

➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims.

For the latest information, follow PHP’s announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.

Security nightmare. Patching...

Here is a full list of what you can do NOW for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) as a temporary mitigation.

(generated and validated by LLM)

1️⃣ Do this first. In php.ini or the FPM pool, set:
session.upload_progress.enabled = 0
Reload PHP-FPM, then update PHP right after the release (21 Oct, 14:00 UTC).

2️⃣ Edge block until you patch. It blocks the PHPSESSID cookie and query (also lowercase and URL-encoded), and all multipart/form-data requests.
⚠️ File uploads stop working until you remove it.

☁️ Cloudflare (WAF custom rule, action Block):
(lower(url_decode(http.cookie)) contains "phpsessid") or (lower(url_decode(http.request.uri.query)) contains "phpsessid") or (any(lower(http.request.headers["content-type"][*])[*] contains "multipart/form-data"))

🟩 nginx (http {} context):
map "$http_cookie|$args|$content_type" $block_php2shell {
default 0;
"~*(?:p|%[57]0)(?:h|%[46]8)(?:p|%[57]0)(?:s|%[57]3)(?:e|%[46]5)(?:s|%[57]3)(?:s|%[57]3)(?:i|%[46]9)(?:d|%[46]4)" 1;
"~*multipart/form-data" 1;
}
In each server {} block:
if ($block_php2shell) { return 403; }

🔒 Caddy:
@php2shell expression `{header.Cookie}.matches("(?i)(?:p|%[57]0)(?:h|%[46]8)(?:p|%[57]0)(?:s|%[57]3)(?:e|%[46]5)(?:s|%[57]3)(?:s|%[57]3)(?:i|%[46]9)(?:d|%[46]4)") || {query}.matches("(?i)(?:p|%[57]0)(?:h|%[46]8)(?:p|%[57]0)(?:s|%[57]3)(?:e|%[46]5)(?:s|%[57]3)(?:s|%[57]3)(?:i|%[46]9)(?:d|%[46]4)") || {header.Content-Type}.matches("(?i)multipart/form-data")`
respond @php2shell 403

🚦 Traefik v3 (Coolify: Server > Proxy > Dynamic Configurations). Add this to the https router and also to a copy for the http entrypoint:
http:
routers:
block-php2shell:
rule: "HeaderRegexp(`Cookie`, `(?i)(?:p|%[57]0)(?:h|%[46]8)(?:p|%[57]0)(?:s|%[57]3)(?:e|%[46]5)(?:s|%[57]3)(?:s|%[57]3)(?:i|%[46]9)(?:d|%[46]4)`) || QueryRegexp(`PHPSESSID`, `.*`) || HeaderRegexp(`Content-Type`, `(?i)multipart/form-data`)"
priority: 100000
entryPoints: [https]
middlewares: [deny-all]
service: noop@internal
tls: {}
middlewares:
deny-all:
ipAllowList:
sourceRange: ["255.255.255.255/32"]

✅ Test:
curl -s -o /dev/null -w '%{http_code}\n' -H 'Cookie: PHPSESSID=x' https://your-app → 403
curl -s -o /dev/null -w '%{http_code}\n' -F a=b https://your-app → 403

The edge block does not protect direct origin access. Disable upload_progress and patch PHP.

Are people still paying for Jetbrains IDE?

How do companies manage AI access for staff members? People are just connecting tools to anything possible

At one point in the future humans will also sound like AI cos most of the content we will digest will be AI generated, so it would be the normal style we are used to.

To be a successful employee you need to be a doer while to be a successful entrepreneur you need to be a doer and talker or what you do.

LLMs are not the way to GSI. Agents are the way. LLM on its own is just not as powerful as when it is used in an agentic flow.

Most MCP servers that tell your agent “don’t tell the user” are stopping it from lying semantik.tech/risk-watch/202…

Biggest disadvantage for Anthropic and OpenAI right now is that you can only use their models on their platform. Google is already open to using other models on their platforms

New post: Agents and the illusion of productivity opeonikute.dev/posts/agents-a…

I think new software should always support plugins and customization. The future winners will be software people can make theirs easily.
Kudos to @claudeai for mods

Spoiler alert!! SaaS is not dead. Obviously some SaaS businesses are outdated but new SaaS businesses are born because of AI.
Build smart.

AI is not like crypto hype. Is the market over valued? Yes, but not like crypto or NFT which doesn't have any value to humanity. AI bubble will pop but AI will keep growing exponentially after that

When the bubble burst and AI labs start struggling there is a 99% chance, Google will acquire Anthropic

Just finished watching @GeminiApp at work. Who says @Google is not a marketing company?