We Survived the PHPocalypse
Ed and Peter survived the PHPocalypse. Peter took his sites down and waited for Laravel Cloud's patch; Ed trusted Cloudflare's mitigations and spent the day patching clients still on PHP 5.6. Their verdict: the PHP community, the PHP Foundation, Laravel and Cloudflare handled it well, Chainguard's early release of embargoed patches did not, and open source supply chain security only works when everyone acts like a good citizen. Then it's on to building: an overnight Solo crash, why Ed builds everything twice, an MCP-powered kill switch that swaps your PHP sites for a "back soon" page, analytics and Hone in Rust, Capstan, and Peter's big question about what a builder's life looks like a year from now. Along the way: a social network launched and pulled in one week, Railway's API key leak, vendor lock-in, data as a moat, Our CVEs, the three Scalpels Ed would install first, and why podcast transcripts are prime training data.