34 posts
Two days after the PHP2Shell fixes, PHP warned of another remote code execution bug with no patch yet. It needs a rare setup, and one setting shuts it...
The PHP project ships fixes for two critical vulnerabilities on October 22, 2026. Here is what is happening, what we have already done, and a practica...
AI features cost money and touch customer data, so we keep a registry of every one. Here is how a call that is not on the list is refused before anyth...
Live video cannot be edited after the fact. Here is how we designed kill switches at the channel and platform level, who can use them and when they ac...
When something changes unexpectedly, the first question is who changed it and when. Here is how audit trails answer that question without becoming a p...
Caching makes pages fast, but a shared cache can also show one customer another customer's data. Here is how we name cache keys so that can never happ...
Two-factor authentication only protects an account if every way of signing in respects it. Here is how we closed the side doors that many apps leave o...
Sometimes the only way to understand a problem is to look at the live system. Here is how we inspect production safely, and why we never fix anything...
An uploaded file can carry more than a picture. Here is how we check types, enforce limits and clean risky formats before any upload can appear in fro...
Permissions only protect people when they are understandable. Here is how we keep roles simple, map them to real responsibilities and handle ownership...
Email that never arrives is a silent failure. Here is how we monitor sending reputation, authentication records and blocklists so messages keep reachi...
VoVo serves many organizations from one shared database. Here is how every record knows its owner, how queries stay inside the right account and where...