Flux
Community Corner Podcast: This Week in PHP Internals with Len Woodward
Programmation Web

Community Corner Podcast: This Week in PHP Internals with Len Woodward

In this episode, Scott talks Len Woodward about This Week in PHP Internals and the state of the PHP Internals world. Links: Our Discord – https://discord.gg/aMTxunVx Buy our shirts – https://store.phparch.com/products/community-corner-podcast-t-shirt Len’s Links: X / Twitter: @ProjektGopher — https://x.com/ProjektGopher Bluesky: @projektgopher.com — https://bsky.app/profile/projektgopher.com Mastodon: @ProjektGopher@phpc.social — https://phpc.social/@ProjektGopher Threads: @projektgopher —…

PHP Architect
16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials
Cybersécurité Programmation

16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials

Socket Threat Research identified a coordinated campaign of 16 Firefox extensions targeting cryptocurrency wallet users. The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their code intercepts recovery phrases and private keys during wallet import flows and attempts to send those secrets to attacker-controlled Cloudflare Workers. The campaign is a cryptocurrency wallet credential-stealing operation with a variety of lures: Four large extensions are clones of…

Socket
Anti-Patterns in Software Blogging
IA Programmation

Anti-Patterns in Software Blogging

Anti-Patterns in Software Blogging Some excellent writing advice from Michael Lynch. Michael warns against "meandering intros", misjudging your reader's existing knowledge, assuming they'll read your previous posts, and excessive formality. He also warns against overreliance on links as an excuse not to explain terminology. This one hurt! I do this all the time, but I have a nagging suspicion that almost nobody ever clicks on them. (In a Lobste.rs comment Michael clarifies that "My rule of…

Simon Willison's Weblog
★ Keeping Laravel and TypeScript in sync with data objects
Programmation Web

★ Keeping Laravel and TypeScript in sync with data objects

At Spatie we build SaaS apps with Laravel on the backend and Inertia with React on the frontend. That split means two type systems have to agree about every payload that crosses between them. Laravel data going out, TypeScript picking it up. There There, the helpdesk we're building, is built exactly like that. Tickets, messages, members, custom sidebar sections, all of it crosses the bridge. We'd go insane maintaining those types by hand. So we don't. There There is in private beta right now,…

Freek Van der Herten
Quoting Jake Boggan
IA Programmation

Quoting Jake Boggan

I was a graph theory junkie long ago and even moved to Budapest for awhile to study among the greats. While I was there I started working on Barnette's Conjecture which came to occupy my thoughts over the next 24 years of my life, on and off as I worked in many different fields. Last summer I even thought for a few days that I had actually solved it. But it's supposedly proven here - problem 180. I don't know what to think exactly. I spent thousands of hours on that problem. I really enjoyed…

Simon Willison's Weblog
OpenAI “rogue” agent activities found on Wikimedia projects
IA Programmation

OpenAI “rogue” agent activities found on Wikimedia projects

OpenAI “rogue” agent activities found on Wikimedia projects Given how tempting a target wikis are for rogue agent swarms, it's not a huge surprise that Wikipedia found evidence of that activity once they went looking: The Wikimedia Foundation conducted its own investigation to see whether Wikimedia websites had been similarly affected by AI agents, focusing on those operated by OpenAI. We can confirm that we have discovered some activity by these “rogue” OpenAI agents on Wikimedia platforms.…

Simon Willison's Weblog
PIE 1.5 Released
Programmation Web

PIE 1.5 Released

The PIE team is pleased to announce the release of the PHP Installer for Extensions 1.5 series, which has been in the works for around five months. There has been significant work gone into some internal improvements which has enabled us to deliver several long-awaited features for the tool. Lets dive into a few of these new features! Install multiple extensions You are now able to install multiple extensions at once, for example: $ pie install php-amqp/php-amqp:^2.2 girgias/csv This is helpful…

The PHP Foundation
Quoting Victoria Kim
IA Programmation

Quoting Victoria Kim

Since the Medicare breach, OpenAI has put in place additional monitoring to allow “immediate intervention” by staff to stop training if the company’s models access the internet in ways they’re not supposed to, Mr. Kwon [chief strategy officer at OpenAI] said. — Victoria Kim, Reporting from the Australian parliament Tags: accidental-cyberattacks, generative-ai, ai-security-research, openai, ai, llms

Simon Willison's Weblog
llm-openai-decisions 0.1a0
IA Programmation

llm-openai-decisions 0.1a0

Release: llm-openai-decisions 0.1a0 OpenAI released their new Jev-style Decisions API, as previously announced at last week's DevDay. Since I already have an llm-typesafe plugin for talking to Jev, I had GPT-6 Astra read the new OpenAI API documentation and build an llm-openai-decisions plugin inspired by llm-typesafe. Unlike Jev, the new gpt-6-luna decision model supports image input in addition to text. Both models charge for input it and not for output: OpenAI's is 10 cents per million input…

Simon Willison's Weblog
EmbeddingGemma 2
IA Programmation

EmbeddingGemma 2

My comment on EmbeddingGemma 2 — Hacker News.I really appreciate that EmbeddingGemma 2 is under the Apache 2.0 license. For embedding models in particular, I don't think it makes sense to use a closed, proprietary, hosted-only model. Most applications of embedding models involve calculating thousands or even millions of embedding vectors and storing them for later comparison. If your model is proprietary, the vendor is likely someday going to decide to stop offering that model. They'll…

Simon Willison's Weblog
Introducing Mistral Large 4: Le chonk
IA Programmation

Introducing Mistral Large 4: Le chonk

Introducing Mistral Large 4: Le chonk Mistral are back in the game. Today they're releasing a preview of Mistral Large 4, a 1 trillion parameter, 49 billion active parameter model trained on their own cluster of 3,800 NVIDIA Grace Blackwell GPUs. The preview is available via their API. They promise to release the open weights model at the "end of this month". The model only supports two reasoning levels - "none" and "high" - via the Mistral API. Here are both pelicans - the "high" one looks…

Simon Willison's Weblog