214 Followers
70 Following
305 Posts
We need your help to test Composer 2.10. Expect a final release next week, now is the time to try it out and flag any issue you find! https://github.com/composer/composer/releases/tag/2.10.0-RC1 #composerphp #phpc
Release 2.10.0-RC1 · composer/composer

Composer 2.10 is ready for a release, and we need your help to test it and report any regression. Please try it out! Running composer self-update --preview will get you the 2.10.0-RC1 Running comp...

GitHub
Search on Packagist is currently unavailable due to large amounts of bot traffic that Algolia did not filter out. They now blocked packagist. UI search and the search API are affected. We are looking into temp workarounds till Algolia resolves our support request from yesterday.

[Gecko] Competition, Innovation, and the Future of the Web - Why Independent Browser Engines Matter

https://blog.mozilla.org/netpolicy/2026/03/23/competition-innovation-and-the-future-of-the-web/

🦎️

Competition, Innovation, and the Future of the Web – Why Independent Browser Engines Matter – Open Policy & Advocacy

Gecko matters because it ensures there’s an independent voice shaping how the internet evolves. Without Gecko, the landscape would be dominated by Apple and Google alone. Is that really the ...

Open Policy & Advocacy

Exceptionally well written article on static closures in #php:

https://f2r.github.io/en/static-closures

Why use static closures?

Why use static closures? (Published on March 3, 2026 - Version française)

F2R Articles
I've been going to conferences for 20 years. Not one person I've spoken to enjoyed the loud music during socials. In fact, almost everyone tells me that they'd rather have no music at all. They just want to have conversations with other people.
@ndw if it is for a PHP conference, there is https://phpc.tv
phpc.tv

Videos uploaded by the PHP community.

phpc.tv

#vendredilecture avec l’apprenti assassin.
Premier volet de la saga du Fitz, "L’assassin royal". Il y a longtemps que je voulais découvrir le travail de Robin Hobb. Et pour le moment, je ne suis pas déçu. L’univers et ses enjeux sont de prime abord assez classiques, mais la plupart des personnages sont très nuancés et les intrigues de cours haletantes.
Je recommande la lecture à tous les amateurs de fantasy.

#mastolivre #SFFF

a decade or so ago, I was writing a H.264 decoder (needed a custom one for stupid reasons which of course had to do with hardware reverse engineering).

the first order of business was to implement CABAC: the final entropy coding stage of H.264 (ie. the first layer I had to peel starting from the bitstream), a funny variant of arithmetic coding. the whole thing is quite carefully optimize to squeeze out bits from video frames by exploiting statistics. in addition to carefully implementing the delicate core logic, I also had to copy-paste a few huge probability tables from the PDF, which of course resisted copy-paste as PDFs like to do and I had to apply some violence until it became proper static initializers in C source code.

furthermore, testing such code is non-trivial: the input is, of course, completely random-looking bits. and the way bitstreams work, I’d have to implement pretty much the whole thing before I got to the interesting part.

so, a few hours later, I figured I’m done with CABAC and reconstructing H.264 data structures, and pointed my new tool at some random test videos. and it worked first try! the structures my program spit out looked pretty much as expected, the transform coefficient matrices had pretty shapes and looked just as you’d expect them to, and I was quite happy with that.

and then I moved on to actually decoding the picture from the coefficients, and this time absolutely nothing worked. random garbage on screen. I spent a long time looking at my 2D transform code searching for bugs, but couldn’t find anything.

and then it hit me exactly what “entropy coding” means. I implemented something that intimately knows and exploits the statistical properties of what video transform coefficients and other structures look like, their probabilities and internal correlations, and uses that to squeeze out entropy and reconstruct it on the other end. my “looks good” testing meant absolute jack shit: I could’ve thrown /dev/urandom into the CABAC decoder instead of actual H.264 video, and it would still look like good video data at this stage until you actually tried to reconstruct the picture.

and sure enough, it turned out I fucked up transcribing some rows from the PDF around a page break or something.

10 years later, I think of this experience every time I see a vibecoded pull request, or other manifestation of AI bullshit. all the right shape, and no substance behind it.

and people really should learn to tell the fucking difference.

PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this:

Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item from themselves as a gift for you. Bam, they have your address.

In particular, attack does not depend on an existing third party seller having poor PII handling hygiene, like the articles have implied.

Basically: If you run OpenClaw connected to any meaningful system you are not fit to design, program or run any kind of software. That disregard for security and quality should leave a black mark on you for many years.