Software Architect & AI Agentic Engineer · Laravel · Vue 3 · Claude/OpenAI · Multi-tenant SaaS founder (CONDOMERA) · LLM content-generation pipelines in product
Colombia / Dominican Republic
Joined September 2020
- Tweets3.2K
- Following840
- Followers345
- Likes5.7K
Ricardo Vargas / Software Engineer retweeted
Información de TransMilenio en tiempo real, vía API y MCP
TransMilenio publica la posición de cada bus cada 20 segundos, y desde hoy está en Croma. Hoy a las 7 de la mañana había 7.853 buses en vía en Bogotá
Ricardo Vargas / Software Engineer retweeted
Your Inertia pages can now update themselves in real time. ⚡️
Mark a prop as live and connect it to a broadcast event. Whenever that event fires, Inertia refreshes just that prop, without polling. Perfect for order statuses, unread counts and dashboards.
Ricardo Vargas / Software Engineer retweeted
So @Ubuntu still hasn't patched this open hole on any Ubuntu server on the public internet that lets anyone take it over
We might just have to switch all our servers over to Debian in this new post-AGI time of rapid cybersecurity hacks which require just as rapid patching
Slowpokes will be left behind
chalmovsky.com/posts/wtf-ubu…
This is why I said you want your VPS ports all closed
Then only let it be accessible inside your Tailscale for SSH and via a Cloudflare Tunnel to receive web traffic
Any Linux box can be taken over with just a single TCP port exposed to the internet now
A stop gap is disabling MPTCP on your VPS now but even better is not having any public ports exposed!
Ricardo Vargas / Software Engineer retweeted
This is why I said you want your VPS ports all closed
Then only let it be accessible inside your Tailscale for SSH and via a Cloudflare Tunnel to receive web traffic
Any Linux box can be taken over with just a single TCP port exposed to the internet now
A stop gap is disabling MPTCP on your VPS now but even better is not having any public ports exposed!
Ricardo Vargas / Software Engineer retweeted
🌏 Introduce x18n, the ultimate toolkit for managing i18n files!
You get CLI, linter, interactive UI, LSP, editor support, CI/CD, and native agent integrations. Make sure you have your locale files up to date and agents in the loop
For any frameworks!
x18n.dev/
Ricardo Vargas / Software Engineer retweeted
Introducing Downbit: download videos from any web page, a 6MB native app, no external dependencies.
downbit.app
Ricardo Vargas / Software Engineer retweeted
how wasn't i aware of soloterm???
terminally online missed important product, how could that happen
My metaharness, Solo (soloterm.com), now supports Linux! It's very good
Give it a shot and lemme know how it goes 😅
Ricardo Vargas / Software Engineer retweeted
If you updated PHP versions 5.6, 7.0 or 7.1 from Ondřej's repo on Wednesday, consider another upgrade ASAP: the package update from last night fixes a few more multipart-upload fixes 🚨
$ apt update
$ apt upgrade
And errr ... consider moving to PHP 8.x 😬
Ricardo Vargas / Software Engineer retweeted
62K people saw "PHP 8.5.12 security patch is incomplete." Fewer read the bottom of his own screenshot: both PHP2Shell CVEs are genuinely fixed.
The claim is about three other paths that may still work on 8.5.12. He says it needs validation, and PHP hasn't confirmed anything yet.
It has happened before. In 2012 PHP had to ship a second fix after its first patch for a critical PHP-CGI bug didn't hold.
So don't roll back. Patch now and watch for the next release.
Leaving this here, PHP 8.5.12 security patch is incomplete. ( needs further validation )
Readers added context they thought people might want to know
The PHP 8.5.12 release fixes the two specific CVEs (via state/bailout changes) detailed in official advisories; referenced "surviving paths" (e.g. var_destroy UAF) are separate pre-existing unserialize issues unrelated to this patch.
php.net/archive/2026.p…
github.com/php/php-src/se…
github.com/php/php-src/se…
github.com/dinosn/php-8.5…
Ricardo Vargas / Software Engineer retweeted
Good news everyone!
The absolute legends @ the Sury php mirror have backported the patch all the way back to 5.6
Ricardo Vargas / Software Engineer retweeted
Critical PHP vulnerabilities to be disclosed tomorrow: php.net/archive/2026.php.
We're working directly with the PHP Foundation to get patched PHP versions into our base images for Laravel Cloud, Forge, and Vapor ASAP.
You may need to redeploy your apps at that time to use these patched versions, but we're also working on the ability to silently patch applications without needing a redeployment.
All customers have been emailed and we will be providing further updates via email as the situation evolves.
Ricardo Vargas / Software Engineer retweeted
I found a CRITICAL auth bypass in Laravel 🚨 (9.2/10)
On MySQL/MariaDB, Laravel's token API guard let an unauthenticated attacker log in as an existing victim user.
Patched in 12.68.0 & 13.29.0.
Thanks to the @laravel team & @taylorotwell for the fast fix 🙏
More info 👇
Ricardo Vargas / Software Engineer retweeted
New video: Claude Code for PHP Developers, a beginner’s guide (2026).
If you write PHP/Laravel and haven’t tried an AI agent in your terminal yet, start here 👇
youtube.com/watch?v=fa_8_aH6…
#PHP #Laravel #ClaudeCode
Ricardo Vargas / Software Engineer retweeted
I just saw Cloudflare launched Quick Tunnels
"One command turns the server on your laptop into a public, encrypted URL on Cloudflare's edge. No account. No DNS. No open ports."
try.cloudflare.com
Ricardo Vargas / Software Engineer retweeted
Silo dizisinin sezon finali yarın geliyor. Meraklısı için Silo 18 ve 17'nin interaktif görselleştrilmiş modellerini bırakıyorum gezinirsiniz 😉
3dscenes.qualityf2p.workers.…
Ricardo Vargas / Software Engineer retweeted
Roy Lee Explains Why Getting Rich Is Painfully Simple in 2026
“This is the single best time in all of human history to start a company. So keep trying.”
“Even if your first eight companies fail and make you zero dollars, your ninth company might make you a millionaire. And in this world, you only have to get rich one time.”
Ricardo Vargas / Software Engineer retweeted
The worst part of the otherwise excellent Logitech mice & keyboards has always been the software. Nice to see an open source, local-only desktop app alternative launch openlogi.org/
Ricardo Vargas / Software Engineer retweeted
proud to announce that we've just added first-party image processing for @laravel
immutable api for manipulating images from resize, crop, convert to webp, store, and more, directly from the request object
a 2.1 mb png down to 75 kb 🤌🏻
