Search

Software craftsmanship - Wikipedia

Software craftsmanship reframes software development as a craft aligned with professional, value-driven practice, challenging the pure engineering mindset and the Agile emphasis on processes. It traces its roots to guild-like traditions, influential books, and a formal manifesto aimed at elevating skills, community, and customer value, with historical signals from London and Chicago.

What is PHP? - TV 2

Translated title. Original: Hvad er PHP? - TV 2

A university lecturer explains a PHP security hole on TV 2, clarifying it is not a hacker attack; he uses a house-door analogy to describe fixing the vulnerability by applying the update.

PHP confirms a new vulnerability, immediately disable upload progress

Translated title. Original: PHP yeni açığı doğruladı, upload progress'i hemen kapatın

PHP warns of a new vulnerability; disable upload progress until the next release to mitigate a potential remote code execution, especially for apps with non-default serialize_handler set to php.

After PHP2Shell: From emergency patch to secure upgrade | heise online

Translated title. Original: Nach PHP2Shell: Vom Notfall-Patch zum sicheren Upgrade | heise online

The article promotes a 2.5-hour webinar by Sebastian Bergmann on upgrading PHP after the PHP2Shell flaw, detailing how to move code to a supported PHP version, address dependencies, and avoid common patching pitfalls. It covers static analysis, refactoring, logging, and a live demo to demonstrate a safe upgrade path and verification of potential compromises.

Converting a WordPress site into a static, PHP-free site that keeps its appearance and does not store passwords. Osaralock Co., Ltd. starts moving services and free checks: - ASCII STARTUP

Translated title. Original: WordPressのサイトを「パスワードを預からず・見た目そのまま」PHPなしの静的サイトへ。株式会社オサラロックが引っ越し代行と無料チェックを開始 : - ASCII STARTUP

A company offers to convert WordPress sites to static PHP-free sites, preserving appearance and content while removing PHP execution. The service includes free online checks, clear pricing, and a pixel-accurate migration process, driven by PHP vulnerability and end-of-support concerns.

How to Make a Database Migration Backward Compatible - Vincent Schmalbach

The document explains how to perform backward-compatible database migrations during multi-version deployments, detailing phased strategies (expand, migrate, contract), the need to account for all app and service interactions, and rollback options to safely transition between schema states without breaking old code.

Hono on Prisma Postgres and Compute, What Worked and What Broke | Shubhra Dev

The article documents building and deploying a Hono bookmarks API on Prisma Postgres and Prisma Compute, detailing setup, version notes, a 500 bug related to route loading, testing results, and observations about migrations, unique constraints, and tool behavior; it includes notes on environment, debugging, and early access statuses for related Prisma components.

What to do as critical PHP flaws puts millions of websites at risk | Computer Weekly

Two critical PHP vulnerabilities allow unauthenticated remote code execution. Patches exist for PHP 8.2+; older systems may remain at risk. Authorities urge immediate remediation and, if necessary, offline containment until fixes are applied.

Microsoft fixes a record 1,400+ flaws, and one is already under attack

Microsoft issued a record Patch Tuesday, fixing over 1,400 security flaws in one month, with 78 rated critical. One flaw already under attack affects Windows Shell, while others affect .NET; AI contributed to bug discovery, and security teams are under heavier load during large updates.

How to build an AI agent that Investigates Vulnerability Alerts - DEV Community

The tutorial describes building a bounded TypeScript AI agent that investigates a vulnerability alert for Next.js (CVE-2025-29927) using Valyu to fetch evidence, compares versions to advisories, and produces a cited brief for human review without applying patches or scanning the app.