/dev/null
Sign in

Faris Chtatou

92 commits

FC

Faris Chtatou

@farischt

Founder @keyrua

commits
92
following
8
followers
16

Commit activity

92 commits in the last 30 days

longest streak 7 days

2,002 / 2,500 XP498 XP to root

Mon, Oct 26

Faris Chtatou@farischt
Deleting a leaked key from Git doesn’t disable it. LiteLLM’s October 23 incident report says a key exposed in May remained valid after the commit was rewritten. For agencies managing several client projects, the hard part is tracing where each credential is used: API services,…
keyrua.devLiteLLM’s Supply Chain Attack: What Agencies Should RotateLiteLLM’s October 2026 report traces a malicious release to a leaked key that stayed valid. A practical revocation and recovery guide for software agencies.
SB
Suliman Benhalim
and on github the old commit is still reachable by its sha after the force push, forks share the same objects. git doesn't forget, it just stops showing you lol
Faris Chtatou@farischt
A request timing out doesn't mean the server stopped working. That makes the retry button a little more interesting when the request creates something.
Faris Chtatou@farischt
Ok time to be honest guys. Are you a
Poll options

3d left

SL
Shane Logsdon
if i’m writing code, i will prototype in php 90% of the time. the other 10% is typescript. this code doesn’t always see the light of day. if an agent is writing the code, i will typically have it write typescript or rust.
EE
Evan Edwards
I mean, I started with integer BASIC and microassembly on the 6502 as a kid. I did C, Pascal, LOGO, Modula-2, Ada, lots of Lisp, C++, D, FalconPL, Perl, and lots of assembly and scripting languages before I got to PHP. And lots since then. Pretty sure nobody should ever know…
DC
David Ciulla
Well, I am a "use the right tool for the job" developer, PHP just happens to be prob my favorite language despite its quirks.

Sun, Oct 25

Faris Chtatou@farischt
For people who contribute to open source: what was harder than the code itself? Understanding the project, reproducing a bug, getting the tests running, something else?
GW
Garrett W.
Understanding the project, in some cases setting up the dev environment, and also understanding what kind of PRs would be welcomed without prior discussion
Faris Chtatou@farischt
If you were a README.md, what would you contain?
Show thread
MA
Md. Khorshed Alam
A quick one-line pitch, three lines of copy-pasteable curl setup, and a massive Troubleshooting section covering all the weird production edge cases.
SL
Shane Logsdon
basics: tldr, quickstart, where to find more details, license. tailor to human users. focus machine/agent info in AGENTS.md

Sat, Oct 24

Faris Chtatou@farischt
I wrote a guide to the October PHP and Node.js security updates for teams maintaining client applications. It covers patched versions, PHP’s October 23 session follow-up, and checking the runtime actually serving requests, including staging and background workers. For Node’s…
keyrua.devPHP and Node.js CVEs: What Software Agencies Need to Patch NowA practical guide to the October 2026 PHP and Node.js security updates: affected versions, PHP's follow-up advisory, deployment checks, and secret exposure.
Faris Chtatou@farischt
AI is going so fast, sometimes I'm overwhelmed. I wanna start building things based on AI just for fun. Any advice/documentation ?
P
phpete
I'm keen to hear your thoughts cause I've been feeling the same, and what aspect is overwhelming you. I've followed, foll back and you're welcome to message me on here :)
Faris Chtatou@farischt
Built Keyrua to give shared .env files a home outside Slack. Pick a project and environment, import/export configuration, or run a command with variables from the CLI. Free to try on one project. https://keyrua.dev/?utm_source=devnull&utm_medium=social&utm_campaign=launch
KeyruaKeyrua — Secure Environment Variable Management for TeamsManage environment variables with project-level Admin and Editor roles, five environments, and separate secret and access histories. Free to start.

Fri, Oct 23

Faris Chtatou@farischt
How do you guys review AI agents code/PRs ?
AO
Ascenda One
I added a proposal here to ensure agents (and human devs) write compliant PRs in the first place. https://github.com/dev-null-sh/dev-null.sh/issues/1011 Personally, in my own work. I start with skills so agents can't write anything that's not first detail spec'd or ratified…
GitHubProposal: a Boost skill that walks agents through preparing a pull request · Issue #1011 · dev-null-sh/dev-null.shProblem There are hundreds of PRs in mere days. For the maintainers life is going to get hectic! The PR templates and .ai/guidelines/github.pull-requests.blade.php (#954) say what a good PR needs, ...
AB
Andrew Brereton
This has become our biggest bottleneck. I added a step in our CI that evaluates the diff to determine if it can go through without human review or not. It determines this by working out if we are changing code in the critical path, adding a new dependency, adding a new design…

Thu, Oct 22