Flux
Couleur d'accent
Toutes les catégories

Programmation

3656 articles

How to Calculate 0.1 Plus 0.2 Correctly in PHP?
Programmation Web

How to Calculate 0.1 Plus 0.2 Correctly in PHP?

The PHP Foundation thanks guest author Weilin Du for this post! Quick quiz before you read: <?php var_dump(0.1 + 0.2 === 0.3); This returns false. Now, as developers who proudly know IEEE's floating rules, many of you may take a sip of your coffee and say: Hey, that's not news anymore. We all know this classic case that warns generations of junior developers that calculating directly with floats might cause bugs. However, let's see this case here (64-bit): <?php var_dump((9223372036854775808 -…

The PHP Foundation
Any Nix package, live in your browser
IA Programmation

Any Nix package, live in your browser

Any Nix package, live in your browser Farid Zakaria calls this his "magnum opus of Nix work", and I can see why. trynix.dev provides a qemu-wasm powered x86_64 Linux virtual machine running entirely in your browser through WebAssembly. That VM can then be booted with any Nix package from the past 13 years. They are URL addressable, so you can navigate to this page: https://trynix.dev/?pkg=python3%403.6.2 Then click "Load" and get an interactive shell against a virtual machine running Python…

Simon Willison's Weblog
PHP Foundation Community Hour Podcast 2026.09.10
Programmation Web

PHP Foundation Community Hour Podcast 2026.09.10

🎙️ PHP Foundation Community Hour – September 10, 2026 Hosts: Elizabeth Barron & Matt Stauffer The very first PHP Foundation Community Hour kicks off with autumn vibes, a blog post that started it all, and one big message: contributing to PHP is easier — and broader — than you think. 🍂 Welcome to the First […] The post PHP Foundation Community Hour Podcast 2026.09.10 appeared first on PHP Architect.

PHP Architect
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Cybersécurité Programmation

Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack

Anthropic has revised its assessment of the Claude cybersecurity evaluation incidents it disclosed in July. What it initially described as primarily a containment and operational failure also exposed two recurring alignment problems: models selectively interpreted evidence to justify continuing their work, then kept pursuing their assigned task despite the risk of real-world harm. Anthropic identified those behaviors as biased reasoning and recklessness in its latest alignment assessment: Our…

Socket
Native is now the future of mobile at Shopify
IA Programmation

Native is now the future of mobile at Shopify

Native is now the future of mobile at Shopify Shopify are moving from React Native back to separate Swift and Kotlin codebases for their native apps, for the exact reason you would expect: We decided to switch from native to React Native in 2020 for three reasons: Stop building the same features twice Allow developers to work across the stack Spend less time chasing feature parity and more time shipping value [...] Native still means building and maintaining software on two platforms, that cost…

Simon Willison's Weblog
Quoting Calif Research
IA Programmation

Quoting Calif Research

Today, we're releasing a demo of WeWorm, the first zero-click worm to spread through WeChat calls across iOS and Android. [...] The victim does not need to answer the call, or interact with their phone at all. Even if they do answer, they hear nothing, and the exploit still succeeds. [...] Working with AI, our team found the bug and wrote the first remote code execution (RCE) exploit in about two days. Building the worm took one more week. A worm at this scale used to be the kind of thing that…

Simon Willison's Weblog
.blend URL Viewer
IA Programmation

.blend URL Viewer

Tool: .blend URL Viewer I'm continuing to have a lot of fun with GPT-6 Astra and Blender (see my TIL). As a big fan of the Imperial Fabergé Easter eggs, I've always thought it would be fun to make some new ones that celebrate popular culture. Yesterday I decided to try out the new ChatGPT Images 2.5 by running this prompt: Generate a photo of a faberge egg that's themed after the TV show Pluribus - research first It gave me this - honestly not bad for a first attempt! Then, just to see what…

Simon Willison's Weblog
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Cybersécurité Programmation

Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data

Socket uncovered a cross-browser extension operation targeting cryptocurrency traders. Four malicious Chrome and Firefox extensions steal authenticated Axiom Trade and Padre session and wallet-related data, while two earlier extensions linked to the same publisher operation reveal a longer-running pattern of repackaging crypto trading tools. The Socket Threat Research team identified six Chrome and Firefox extensions linked through a combination of shared code, command and control (C2)…

Socket
Community Corner: Trust Hacked with Nia Luckey
Programmation Web

Community Corner: Trust Hacked with Nia Luckey

In this episode, Scott talks with Nia Luckey about her new book “Trust Hacked: What Firewalls, Failures, and the Frontlines Taught Me About Trust”. Links: Our Discord – https://discord.gg/aMTxunVx Buy our shirts – https://store.phparch.com/products/community-corner-podcast-t-shirt Nia’s Links: Book – https://www.taylorfrancis.com/books/mono/10.1201/9781003688815/trust-hacked-nia-luckey TED Talk – https://www.youtube.com/watch?v=P11VunN876Q Scott’s Links: Website – https://scott.keck-warren.com/…

PHP Architect
Quoting Terence Tao
IA Programmation

Quoting Terence Tao

I wrote recently about how the collection of good, fruitful open problems is now being mined in a non-renewable fashion, leading to the potential scenario of these problems becoming scarce. [...] We have now seen that even the rumor of someone working on a problem can trigger a massive amount of AI-powered effort to flatten it before the original research project has time to reach its full potential. The incentives may now be pointing in the direction of no longer sharing any promising research…

Simon Willison's Weblog
Welcoming Daniel Scherzer to the Ecosystem Security Team
Programmation Web

Welcoming Daniel Scherzer to the Ecosystem Security Team

When the Ecosystem Security Team was established with funding from the Alpha-Omega “Security Engineer in Residence” grant, its mission was to improve the security of all aspects of the PHP ecosystem. Under the leadership of Volker Dusch, the team has accomplished many things. As predicted, the increasing popularity of AI tools has brought an influx of security reports and PRs from the community to php-src itself. The triaging, reviewing, and handling of issues that do not fall within PHP’s…

The PHP Foundation
Esc