Every time I join a #PHP Discord server, I quietly hope someone notices what I'm "playing". 😂
Remote
Lincoln Russell
@linc@phpc.social
mastodon 4.7.3Web software leader deep in community organizing & education who thinks PHP-backed hypermedia is 💯🚀. [he/him]
"Deal with evil through strength. But affirm the good in man through trust. In this way, we are prepared for evil, but we encourage good." — Master Kahn
Speaking at Longhorn PHP, 16 Oct: https://longhornphp.com
248 Followers
221 Following
50 Posts
Joined November 06, 2022
Homepage:
LinkedIn:
Project:
Sitting here seriously considering reposting the Pope for just stating the obvious.
Not a reassuring signal.
If you want the open Web to survive, figure out how to stop giving hyperscalers & fascists money.
Yes, your job counts.
Start now.
Using GenAI to write your code is like using slot machines as an investment strategy. It is so very exciting and gratifying until, eventually, the house wins.
This is my (╯°□°)╯︵ ┻━┻ post on LinkedIn, enjoy: https://lnkd.in/p/gbpmw5-i
My #ADHD *strongly* believes I am a far bigger gamer than I am, given the number of unplayed games & underused devices I own. 😅
And, based on the number of playmats, it believes I am playing Magic: The Gathering at a rate 1000x of reality. 😂
I believe I am soon to be the first person to migrate a #community out of #Discord with all its data intact. 😳
Replying to
@mattwebbdev@veganism.social I think it's Kickstarter making out best tbh. 🤣 While I own a dozen Steam games I've never played, I minimize $ in DRM'd media because it ain't ever really mine.
I think it's high time we dropped the 'B' from 'BDFL'.
Replying to
@ramsey@phpc.social Mundane narcissism.
Even now, she is surely smug about main-charactering herself from prison, not experiencing the humiliation you or I would.
To narcissists, validation by centering yourself is the entire goal.
Yard sale day. Random teenager: “You seem like a dad. Or know dad things.”
You're not wrong, kid. 😂
Folks who think you're using "fascist" hyperbolically never stop to wonder who convinced them all uses of that word are hyperbolic... 🤔
Replying to
Obviously there are many asterisks, circumstances, & fuzzy maths involved to make a toot that neat. No, I am not actually job seeking. Yes, I am making light of a thing that makes me sad on the regular. It's good way to cope tbh. 🙃
"Why have I never really had a mentor in my software career when I had so many before that? Oh right..."
Replying to
Similarly, "how to build a not-for-profit community" has never been made into software.
A forum is not this. A forum is "Here is basic functionality for peer-to-peer content." If you think that's the same thing, extremely do not @ me.
Replying to
I am absolutely stunned by this incredible divorce from the reality in the realm of software security.
Replying to
yes i claimed the namespace & safely pointed it back at valid code before i tooted about it, don't @ me 😛 im irritatingly flippant under pressure, not irresponsible
Replying to
omg also they didn't unpublish their myriad bespoke dependency library repos which are far more likely to contain a bug than core imo 😂 so even if I believe their bullshit for a second, 0/10 execution
Just made the 2000th commit on Nitro Porter.
Naturally, it was a fix for a static analysis error that slipped by me. 😂
Replying to
@naderman@phpc.social Man, that rings true. Packagist always gets left off the IT shutdown list, and there's others. I was on packages I shouldn't have been for a LONG time. I am still the resource admin on a different platform for Vanilla, which I left more than 6 years ago. Just had a reach out AND an admin notification *this week* about 2 separate accounts for a job I left a year ago.
Replying to
No one in a company wants to admit that your feelings are important.
I have often been told not to trust my feelings, because others know better.
Luckily, I'm terrible at listening and my feelings are louder than theirs.
"It's OK that X isn't done securely because we do Y and Z checks too" is not a reassuring statement.
What you actually are saying is: "I knew this was insecure and did it anyway" — that tells me all I need to know.
The last time someone said that to me, you'll never guess what I found when I inspected Y & Z.
Spoilers: My next task was to teach a medium-sized company how to handle a #security incident.
me: the heartstopper movie is out…
husband: we should rewatch the series first
me: i find your terms agreeable
we just binged season one and i am fully prepared to fight the entire world *right this minute*
i don’t have the words to adequately convey what the series means to me, i am sure this is a therapy toot, but good lord the catharsis of watching high schoolers be… nearly mentally healthy
I've been employed as a developer by 4 companies that sold software.
In ALL, I discovered at least one potentially-company-ending #security flaw.
I also led #incident responses to active exploits in 3/4 that successfully contained breeches without catastrophic impacts.
I want to believe this is all because I'm very good at my job.
What I actually believe is that the bar for security knowledge & critical thinking is on the ground and I trip over it frequently by talking to people outside dev.
Replying to
bro hasn't even heard of the wayback machine? forks? _how git works_?
this must be a feeble gaslighting attempt or it's just too incompetent to comprehend
Replying to
"it would be more secure if we deleted the 1 copy of the code that could distribute a patch and also open a textbook security chain flaw" —Higher Logic, apparently
Replying to
@naderman@phpc.social The bar is *on the ground* for responsible technical management in SaaS companies. It's 100% driven by what folks think they can get away with ignoring. I've *never* joined leadership of a company and not found a deep rabbit hole of serious problems.
People are organizing more. Like... all over.
It's exhausting and slow. And hopeful. And resilient.
The pendulum swings once more.
If you haven't noticed it yet, I think you will soon.
Replying to
@ramsey@phpc.social The social club I've managed for 20-odd years has exactly the same problem, and we just talked about yesterday. This feels like a workable solution for us, too. Thanks!
Replying to
@luceos@fosstodon.org @ian@phpc.social A future version of @agorakit@phpc.social.
The Discord scraper can do incremental updates, so I'll keep the data fresh til it's "ready" or Discord forces our hand. 'Plan A' is not to abandon Discord entirely but wind down the scope of text chats.
Over the last few years, my vision evolved enough I'd no longer call my goal a 'forum' and the things I want to build would weigh too heavily on a plugin-based system so I had to let go of Flarum.
Latest way I made myself lol:
A friend is thoughtfully polling a small group of us for the setting & theme of a TTRPG he's setting up. I'm a first-time player. We've been chatting about it for a couple days.
I reply to the 6th poll and give a verbose answer re: availability. I wait a beat. Then:
"anyway when do i decide im a bard"
Replying to
@ramsey@phpc.social I think that'd be great, those slides rung true to me. I think about debugging a lot — I've gotten compliments about my ability in it yet have trouble explaining it — and wrote about "what is it anyway?" last summer: https://lincolnwebs.com/debugging-everything/
Replying to
ALSO — *weaponizing* ISO 8601 by using it EVERYWHERE "because it's the standard!!1" —even in unhinged places like, say, an isolated date range in a web UI — is a jerk thing to do.
No, my brain cannot parse "2026-07-27 - 2026-08-01" as fast as "27 Jul - 1 Aug", so sorry for not being a computer. 😛 Maybe think about what you're building.
Replying to
@luceos@fosstodon.org I just found their note — they clearly don't even know it exists lol
Replying to
I've got Microsoft talking to me like I'm a computer in one window while Discord talks to me in another like I'm living in Victorian times with MD,Y.
Replying to
@gvwilson@mastodon.social I noticed in mid-2020, when I changed jobs for the first time in 8 years, and started maintaining my own 10K-word record of how to do it, soup-to-nuts, because it no longer fit in my head. (in case you're curious https://lincolnwebs.com/php-localhost)
Replying to
@luceos@fosstodon.org The most embarrassing part is how confused they'll be about why I could post on the "closed" community forum, because they've forgotten how their own software works.
Replying to
@luceos@fosstodon.org "if we delete our code then the AI boogeyman can't get us" looooooool https://open.vanillaforums.com/discussion/39625/vanilla-open-source-update wowwowow
Emoji-based post reactions were invented at Vanilla Forums in 2010 in Montreal.
If you're reading this, you're now a significant % of the population that knows this.
I'm pretty sure if a US tech monopoly had done it, *everyone* in tech would know, because they'd never shut up about it.
Replying to
@timwolla@phpc.social In a vacuum, perhaps. In our world (https://en.wikipedia.org/wiki/List_of_date_formats_by_country) I'd rather pave the cowpath.
I am pro-excommunication.
I am also pro-governance, of the democratic variety.
If you don't know where the lines are and aren't enforcing them, you're not governing at all.
Fascists love to call *you* a fascist for having principles & enforcing any at all. They want to erase the lines to accrue power & validate their world view.
Fuck 'em.
It'll feel real bad. That's because you have empathy. Excommunicate them anyway. Come talk to me about it and I'll give you a high five in solidarity.
You can draw a line from the rise of 4chan to the Trump administration.
Being a virulent, fascist asshole in public fully broke societal containment.
Putting the lid back on that jar is more work than an election can do.
Millennials & Zoomers will learn to organize, or we're gonna lose everything.
Looks like Higher Logic unpublished the Vanilla Forums repo last week (that they stopped sharing code to last year).
Good thing I totally saw that coming and made a fork. 😎 https://github.com/prosembler/vanilla