Symfony Station Communiqué — 26 April, 2024. A look at Symfony, Drupal, PHP, Cybersecurity, and Fediverse news!
Tags: symfony, drupal, php, fediverse
Published: 2024-04-28 14:00:00

This communiqué [originally appeared on Symfony Station](https://symfonystation.mobileatom.net/Symfony-Station-Communique-26-April-2024). 
  
Welcome to this week's Symfony Station communiqué. It's your review of the essential news in the Symfony and PHP development communities focusing on protecting democracy. That necessitates an opinionated Butlerian jihad against big tech as well as evangelizing for open-source and the Fediverse. We also cover the cybersecurity world.  
  
There's good content in all of our categories, so please take your time and enjoy the items most relevant and valuable to you. This is why we publish on Fridays. So you can savor it over your weekend.  
  
  
Or jump straight to your favorite section via our website.
  
- [Symfony Universe](https://symfonystation.mobileatom.net/Symfony-Station-Communique-26-April-2024#symfony)  
- [PHP](https://symfonystation.mobileatom.net/Symfony-Station-Communique-26-April-2024#php)  
- [More Programming](https://symfonystation.mobileatom.net/Symfony-Station-Communique-26-April-2024#more)  
- [Fighting for Democracy](https://symfonystation.mobileatom.net/Symfony-Station-Communique-26-April-2024#other)  
- [Cybersecurity](https://symfonystation.mobileatom.net/Symfony-Station-Communique-26-April-2024#cybersecurity)  
- [Fediverse](https://symfonystation.mobileatom.net/Symfony-Station-Communique-24-April-2024#fediverse)  
  
Once again, thanks go out to Javier Eguiluz and Symfony for sharing [our communiqué](https://symfonystation.mobileatom.net/Symfony-Station-Communique-19-April-2024) in their [Week of Symfony](https://symfony.com/blog/a-week-of-symfony-903-15-21-april-2024). 
  
**My opinions will be in bold. And will often involve cursing. Because humans.**  
  
---  
  
## Symfony  
  
As always, we will start with the official news from Symfony.  
  
Highlight -> "This week, Symfony continued adding compatibility with the upcoming PHP 8.4 version and also focused on tweaking and polishing the new features of the upcoming Symfony 7.1 version. Meanwhile, we published more information about some of the talks that will be part of the SymfonyOnline June 2024 conference."  
  
[A Week of Symfony #903 (15-21 April 2024)](https://symfony.com/blog/a-week-of-symfony-903-15-21-april-2024) 


They also have:

[SymfonyLive Berlin 2024: Using container's features to manage complexity](https://symfony.com/blog/symfonylive-berlin-2024-using-container-s-features-to-manage-complexity)

[SymfonyOnline June 2024: Crafting Elegant Symfony Tests](https://symfony.com/blog/symfonyonline-june-2024-crafting-elegant-symfony-tests)

[SymfonyOnline June 2024: The big upgrade. All the way up to Symfony 7 and PHP 8.3](https://symfony.com/blog/symfonyonline-june-2024-the-big-upgrade-all-the-way-up-to-symfony-7-and-php-8-3)

[SymfonyOnline June 2024: LIVE (Component) Experience](https://symfony.com/blog/symfonyonline-june-2024-live-component-experience)

[Newsletter](https://symfony.cmail20.com/t/y-e-xuuhiky-dyurtluuut-ij/)


SensioLabs has an announcement:

[SensioLabs Germany Announces New Managing Director: Oskar Stark](https://blog.sensiolabs.com/2024/04/22/sensiolabs-germany-announces-new-managing-director-oskar-stark/)


Blackfire shares:

[Blackfire, the opinionated do-it-for-me observability solution](https://blog.blackfire.io/blackfire-the-opinionated-do-it-for-me-observability-solution.html)  

---  
  
## Featured Item  

This week I am featuring my latest article because I want you to help out SymfonyCasts' Ryan Weaver. I start with:

"Symfony is unbeatable when it comes to building complex and scalable web applications. Be they sites, services, an API, or Spotify. It's a fantastic weapon in your PHP programming skills arsenal. So, breakout you laptop and put your thinking helmet on. _This is the way_ to learn modern Symfony and slay your PHP space demons."
<br/>
### [Lucky like a 7 - Seven SymfonyCasts Courses to Master Symfony 7](https://symfonystation.mobileatom.net/lucky-7-symfonycasts-symfony-7) 
  
<br/>
**Please read this and seriously consider my main call to action for Ryan and his family.**

---  
  
### This Week  
  
Lubna Altungi shares the:
  
[Fast-Track to Become A Bad Symfony Developer](https://medium.com/@lubna.altungi/fast-track-to-become-a-bad-symfony-developer-2f7313924330)  

**Clever.**

David Garcia says:

[It is best to embrace Design Patterns if you work with Symfony](https://david-garcia.medium.com/it-is-best-to-embrace-design-patterns-if-you-work-with-symfony-a3c794bf4d37)

Alibid lists the:

[Top 15 Symfony Interview Questions and Answers](https://medium.com/@aliabid.immutabledevs/top-15-symfony-interview-questions-and-answers-b2aa0ec2d4cc)

**Question 3 would be a strange one.** 😉

Sylvain Blondeau has a new Symfony newsletter:

[Symfony Level Up](https://symfonylevelup.substack.com/p/symfony-level-up-1)

**Unfortunately, it's on a rapidly enshitifying Substack. Sylvain, mon freré check out Ghost and Buttondown while you can.**

Speaking of Ghost, I will share this out of its normal section below.

[Ghost is federating over ActivityPub to become part of the world’s largest publishing network.](https://activitypub.ghost.org/)

Serghei Pogor examines:

[What PHP Symfony Migration Commands Do You Need to Know](https://sergheipogor.medium.com/what-php-symfony-migration-commands-do-you-need-to-know-a5a39c4b64c0)

Maico Orazio has:

[Release Announcement: KeycloakClientBundle v2.0](https://dev.to/mainick/release-announcement-keycloakclientbundle-v20-3oga)

Navid Hosseini looks at:
  
[Running a Symfony application on AWS Lambda (Part 2)](https://medium.com/@naviloper/running-a-symfony-application-on-aws-lambda-part-2-decc8e61400f)  

Parthenon announces:

[Parthenon Is Now Open Source](https://getparthenon.com/blog/parthenon-now-open-source/) 

dr0bz is:

[Building Objects in the API Lifecycle](https://dev.to/dr0bz/building-objects-in-the-api-lifecycle-36gl)
  
### CMSs  
  
Sulu explores:
  
[Mastering Structured Content: A Comprehensive Guide to Structured Content CMSs](https://sulu.io/blog/mastering-structured-content-a-comprehensive-guide-to-structured-content-cmss)  

<br/>

TYPO3 has:  
  
[Where To? Building the Road to EU Policy Compliance](https://typo3.org/article/where-to-building-the-road-to-eu-policy-compliance)

[Open Source and Digital Sovereignty](https://typo3.com/blog/open-source-and-digital-sovereignty)

[TYPO3 v13.1—The Surfer’s Starterkit](https://typo3.org/article/typo3-v131-the-surfers-starterkit)

[Showcase Your Project: Explore Exciting New TYPO3 Award Categories and Deadline Updates](https://typo3.com/blog/new-typo3-award-categories)
  
<br/>  
  
Joomla announces the:  

[The April Issue](https://magazine.joomla.org/all-issues/april-2024/the-april-issue-2024) 

Highlights include:

[Tamper-Proof core updates for Joomla - TUF making it into 5.1](https://magazine.joomla.org/all-issues/april-2024/tamper-proof-core-updates-for-joomla-tuf-making-it-into-5-1)  

**Drupal is also integrating it.**
  
[What's new in Joomla 5.1?](https://magazine.joomla.org/all-issues/april-2024/what-s-new-in-joomla-5-1-1)  

<br/>  

Drupal has an announcement:

[Drupal 11.0.0-alpha 1 will be released on the week of April 29, 2024](https://www.drupal.org/about/core/blog/drupal-1100-alpha-1-will-be-released-on-the-week-of-april-29-2024)

**Cool. This should mean we get 11 and automatic fucking updates this summer rather than at the end of the year.**

Dries Buyaert announces:

[Evolving Drupal's Layout Builder to an Experience Builder](https://dri.es/evolving-drupal-layout-builder-to-an-experience-builder)

**Looks like Dries decided to save Paragraphs from Gutenberg.**

Drupal the details:

[Working toward an Experience Builder](https://www.drupal.org/about/core/blog/working-toward-an-experience-builder)

**This better explains the decision which favors site builders over content creators. And Gutenberg may be integrated/compatible later. In any event this will take years to come to fruition.**

The Drop Times has:

[A Conversation with Dominique de Cooman on Drupal, Mautic, Open DXP and Dropsolid](https://www.thedroptimes.com/interview/39289/conversation-with-dominique-de-cooman-drupal-mautic-open-dxp-and-dropsolid) 
  
**Interesting projects.** 

[Streamlining Local Development with DDEV, Docker, and NGROK](https://www.thedroptimes.com/39487/streamlining-local-development-with-ddev-docker-and-ngrok)  

[Smile Launches Sobki: A New No-Code Drupal Profile at Drupalcamp Rennes 2024](https://www.thedroptimes.com/39290/smile-launches-sobki-new-no-code-drupal-profile-at-drupalcamp-rennes-2024)

[Drupal's Innovation & Future: 2024 and Beyond—Part 2 | Industry Experts' Perspective](https://www.thedroptimes.com/39239/drupals-innovation-future-2024-and-beyond-part-2-industry-experts-perspective)

**Carlos and Oscar have it right in this one.**

**And here's my perspective, [Does Drupal Have a Path to Growth?](https://symfonystation.mobileatom.net/Drupal-Path-Growth).**

LN Webworks shows us:

[How To Use Cron Jobs For Task Automation In Drupal](https://www.lnwebworks.com/Insight/how-use-cron-jobs-task-automation-drupal)

Specbee explores:
  
[Improving Drupal SEO: How to Fix Duplicate Content with the Global Redirect Module](https://www.specbee.com/blogs/drupal-seo-fix-duplicate-content-with-global-redirect-module)  

Drupal Easy examines:

[cspell and drupalorg CLI: two useful tools for Drupal contrib module maintainers](https://www.drupaleasy.com/blogs/ultimike/2024/04/cspell-and-drupalorg-cli-two-useful-tools-drupal-contrib-module-maintainers)  

Drupalize.Me shares:

[Learning Drupal with the Help of an AI Tutor](https://drupalize.me/blog/learning-drupal-help-ai-tutor)

**Uh, no. Maybe it three to four years. Definitely in the future. For now subscribe to DrupalizeMe instead.**
  
Capellic looks at:
  
[Frontend performance optimization for Drupal websites: Part 1](https://capellic.com/blog/frontend-performance-optimization-drupal-websites-part-1)  

Gábor Hojtsy says:
  
[This is how I update my Drupal modules to Drupal 11 with only GitLab and drupal.org in my browser!](https://www.hojtsy.hu/blog/2024-apr-19/how-i-update-my-drupal-modules-drupal-11-only-gitlab-and-drupalorg-my-browser)  

Alex Moreno reports:

[Open-source CMS like Drupal and WordPress dominate Fortune 500](http://alexmoreno.net/rise-open-source-drupal-and-wordpress-dominate-fortune-500-cms/)  

Tag 1 continues a series:

[Migrating Your Data from Drupal 7 to Drupal 10: Source Site Audit - A High Level Overview](https://www.tag1consulting.com/blog/source-site-audit-high-level-overview)

Balint Pekker advocates:

[Simplifying Drupal Documentation](https://bpekker.dev/simplifying-drupal-documentation/)

**Yes. Any and everything to do with Drupal needs to be simplified.**

### Previous Weeks  
  
Tag1 starts a series:

[Migrating Your Data from Drupal 7 to Drupal 10: Getting to Know Your Migration](https://www.tag1consulting.com/blog/getting-know-your-migration)

DrupalizeMe explains:

[Tuning Drupalize.Me Search Results with Solr Query Re-Ranking and Search API](https://drupalize.me/blog/tuning-drupalizeme-search-results-solr-query-re-ranking-and-search-api)

ImageX Media shows us how to:

[Augment Your Drupal Content Management Workflows with the Augmentor AI Module](https://imagexmedia.com/blog/drupal-content-management-augmentor-ai)  

Listberg has this snippet:

[Symfony Decorators in Drupal: An Example](https://listberg.com/symfony-decorator-drupal)

Lubna Altungi explores:
  
[Uploading Images in Symfony: A Developer’s Journey](https://medium.com/@lubna.altungi/uploading-images-in-symfony-a-developers-journey-e959a753c9ae)  
  
---  
## PHP  
  
### This Week  
  
William Martins examines:
  
[Property Hooks no PHP 8.4](https://dev.to/williamxsp/property-hooks-no-php-84-2gh3) 

Terence Eden asks:

[Where you can (and can't) use Emoji in PHP?](https://shkspr.mobi/blog/2024/04/where-you-can-and-cant-use-emoji-in-php/)😈

David Duymelinck looks at:

[PHP features: Attributes](https://dev.to/xwero/php-features-attributes-32p6)

StrangeBuzz shares a snippet:

[Transforming an array into a traversable object with PHP](https://www.strangebuzz.com/en/snippets/transforming-an-array-into-a-traversable-object-with-php)

Davide De Sio explores:

[Superpower REST API DX with Serverless ⚡ and DevOps Best Practices on AWS (PHP Version)](https://dev.to/ddesio/superpower-rest-api-dx-with-serverless-and-devops-best-practices-on-aws-php-version-2j8j)

Filipe Pires shows us:

[How to use PHP inside a Docker Container using an IDE like VS Code (without installing PHP locally)](https://medium.com/nerd-for-tech/how-to-use-php-inside-a-docker-container-using-an-ide-like-vs-code-without-installing-php-locally-e7647ad11858)

**Interesting.**

Alex compares:

[Abstract Classes VS Interfaces](https://alexwebdevelop.activehosted.com/social/bc6dc48b743dc5d013b1abaebd2faed2.335)

Roberto Butti examines:
  
[Machine Learning with PHP](https://dev.to/robertobutti/machine-learning-with-php-5gb)  

Roman Ushakov looks at:

[PHP: Implementing proxy for keepalive connections using Nginx](https://aspirin4k.medium.com/php-implementing-proxy-for-keepalive-connections-using-nginx-24e610266a94)  

Jochelle Mendonca moves:

[From Old Habits to Modern Best Practices: Introducing Enums](https://medium.com/@jochelle.mendonca/from-old-habits-to-modern-best-practices-introducing-enums-e279a4573106)  
  
Omandi Jeff explores:
  
[Unlocking PHP Configuration within Docker Containers](https://medium.com/@11554jeff/unlocking-php-configuration-within-docker-containers-01c59f0b6e68) 

Shalini Baskaran lists her:

[Top 10 PHP Testing Frameworks for 2024](https://dev.to/lambdatest/top-10-php-testing-frameworks-for-2024-4gee)  

PHP.net has a:

[Statement on glibc/iconv Vulnerability](https://www.php.net/archive/2024.php#2024-04-24-1)
  
Free Code Camp has an extensive handbook:

[How to Implement JSON Web Tokens (JWTs) in PHP – PHP Authentication Handbook](https://www.freecodecamp.org/news/php-jwt-authentication-implementation/)  

Doğan Uçar is back with another gem:

[Property Hooks RFC for PHP 8.4](https://doganoo.medium.com/property-hooks-rfc-for-php-8-4-7bc26f9be989) 

Garrett Mills examines:

[Mitigating the iconv Vulnerability for PHP (CVE-2024-2961)](https://garrettmills.dev/blog/2024/04/22/Mitigating-the-iconv-Vulnerability-for-PHP-CVE-2024-2961/)

Erland Muchasaj looks at:

[PHP: Dynamic method calling — Part 2](https://medium.com/@erlandmuchasaj/php-dynamic-method-calling-part-2-e231cb4caf10)  

Peter Knowles shows us how to:

[Optimize PHP-FPM](https://medium.com/@peterknowlesca/optimize-php-fpm-b0f61e93c8ae) 

Sarven Dev explores: 

[Rethinking Mocking: DIY Approach vs. Frameworks on examples in PHP and Typescript](https://sarvendev.com/2024/04/rethinking-mocking-diy-approach-vs-frameworks-on-examples-in-php-and-typescript/) 

Phoronix reports:

[Sovereign Tech Fund Makes New Investments Into GNOME & PHP, Bug Bounty For systemd](https://www.phoronix.com/news/Sovereign-Tech-Fund-PHP-GNOME)  

**200,000 euros for PHP! Very generous.**

Camilo Herrera examines:

[Detection of web vulnerability scanning with PHP and Apache mod_status](https://medium.com/winkhosting/detection-of-web-vulnerability-scanning-with-php-and-apache-mod-status-01aeb1395548)  
  
### Previous Weeks 
  
Inspector shows us:

[How to Manage a Software Delivery Cycle](https://inspector.dev/software-delivery-cycle-beyond-basic-monitoring/)


---  
  
## More Programming  

Grant Horwood looks at:
  
[Uploading to s3 with bash](https://gbh.fruitbat.io/2024/04/22/uploading-to-s3-with-bash/ ) 

Alex Efimenko explores:
  
[jQuery 4: A New Era](https://medium.com/@alexefimenko/jquery-4-a-new-era-3695332777ef)

**If you use it, update it. Otherwise, avoid it.**

Jason Knight continues with a new idea:

[Building A Better JavaScript DOM Builder : Part 2 Extending System Objects](https://deathshadow.medium.com/building-a-better-javascript-dom-builder-part-2-extending-system-objects-ec159349c864)   

[Better JS DOM Building With DOM-JON — Part 3 : The State Object](https://medium.com/codex/better-js-dom-buildingwith-dom-jon-part-3-the-state-object-7f3ec5fc2b7a)  

Smashing Magazine examines:

[Converting Plain Text To Encoded HTML With Vanilla JavaScript](https://www.smashingmagazine.com/2024/04/converting-text-encoded-html-vanilla-javascript/)

[F-Shape Pattern And How Users Read](https://www.smashingmagazine.com/2024/04/f-shape-pattern-how-users-read/) 

Go Make Things offers advice on:

[Your first Web Component](https://gomakethings.com/your-first-web-component/)

Lullabot asks:

[Do You Still Need Sass?](https://www.lullabot.com/articles/do-you-still-need-sass-2024)  
  
**Audrey knows her stuff.**

Sitepoint has:
  
[Creating Fluid Typography with the CSS clamp() Function](https://www.sitepoint.com/fluid-typography-css-clamp-function/) 

WebKit pleads:

[Help us invent CSS Grid Level 3, aka “Masonry” layout](https://webkit.org/blog/15269/help-us-invent-masonry-layouts-for-css-grid-level-3/)

GitPod shares:

[A Platform Team’s pocket guide to Cloud Development Environments](https://www.gitpod.io/blog/whats-a-cloud-development-environment)

**[DrupalPod](https://github.com/shaal/DrupalPod) is what its name implies and is fantastic.**

Jake Archibald compares:

[HTML attributes vs DOM properties](https://jakearchibald.com/2024/attributes-vs-properties/)

Five rates the:

[5 Best SQL IDEs](https://five.co/blog/5-best-sql-ides/)

**I wonder why Five is number 1. 🧐

---  
  
## Fighting for Democracy  
  
[Please visit our Support Ukraine page](https://symfonystation.mobileatom.net/Support-Ukraine) to learn how you can help kick Russia out of Ukraine (eventually, like ending apartheid in South Africa).  
  
### The cyber response to Russia’s War Crimes and other douchebaggery  
The Register reports:

[Watchdog tells Dutch govt: 'Do not use Facebook if there is uncertainty about privacy'](https://www.theregister.com/2024/04/22/meta_facing_dutch_government_departure/)

[US charges Iranians with cyber snooping on government, companies](https://www.theregister.com/2024/04/24/iranians_charged_cyber_espionage/)  

The Guardian reports:

[Netanyahu vows to fight US sanctions on IDF unit accused of violations in West Bank](https://www.theguardian.com/world/2024/apr/21/us-poised-impose-sanctions-israel-defense-force-netzah-yehuda-battalion)

**Better later than never and something rather than nothing. And fuck Netanyahu with a broken baseball bat.** 

BleepingComputer reports:

[US imposes visa bans on 13 spyware makers and their families](https://www.bleepingcomputer.com/news/security/us-imposes-visa-bans-on-13-spyware-makers-and-their-families/)  

EuroNews reports:

[Japan's antitrust body orders Google to fix ad search limits affecting Yahoo](https://www.euronews.com/next/2024/04/22/japans-antitrust-body-orders-google-to-fix-ad-search-limits-affecting-yahoo)

[TikTok subject to second DSA investigation over Lite app, faces suspension](https://www.euronews.com/next/2024/04/22/tiktok-subject-to-second-dsa-investigation-over-lite-app-faces-suspension)

TechCrunch reports: 

[TikTok pulls feature from Lite app in EU over addiction concerns](https://techcrunch.com/2024/04/25/tiktok-lite-rewards-feature-suspended-eu/)  

**Further proof than when you regulate something you can mitigate its evils.**

The Verge reports:

[Biden signs TikTok ‘ban’ bill into law, starting the clock for ByteDance to divest it](https://www.theverge.com/2024/4/24/24139036/biden-signs-tiktok-ban-bill-divest-foreign-aid-package)  

**I am sure he knows this will likely be thrown out by the courts (it singles out TikTok vs. being a privacy bill). The administration may not even defend it in the courts. He did so to get the c^nts in the House to pass aid for Ukraine. And unfortunately, Israel.**

Reuters reports:

[Russian programmers play 'cat and mouse' game to outsmart censors](https://www.reuters.com/world/europe/russian-programmers-play-cat-mouse-game-outsmart-censors-2024-04-25/)

**Just a reminder that every Russian is not a c^nt.**

### The Evil Empire Strikes Back  

Ars Technica reports:
  
[North Korea is evading sanctions by animating Max and Amazon shows](https://arstechnica.com/tech-policy/2024/04/north-korea-is-evading-sanctions-by-animating-max-and-amazon-shows/)  
  
[Windows vulnerability reported by the NSA exploited to install Russian malware](https://arstechnica.com/security/2024/04/kremlin-backed-hackers-exploit-critical-windows-vulnerability-reported-by-the-nsa/)  

The Register reports:

[Microsoft is a national security threat, says ex-White House cyber policy director](https://www.theregister.com/2024/04/21/microsoft_national_security_risk/)

**It's business and cloud products sure as fuck are.**

Bleeping Computer reports:

[Russian Sandworm hackers targeted 20 critical orgs in Ukraine](https://www.bleepingcomputer.com/news/security/russian-sandworm-hackers-targeted-20-critical-orgs-in-ukraine/)

The Register reports:

[Russia, Iran pose most aggressive threat to 2024 elections, say infosec pros](https://www.theregister.com/2024/04/25/mandiant_russia_and_iran_pose/)

The Next Web reports:

[Cyberattacks on Poland surged after election of pro-Ukraine government, NetScout says](https://thenextweb.com/news/cyberattacks-poland-surge-after-election)

Wired reports:

[The Destruction of Gaza’s Internet Is Complete](https://www.wired.com/story/gaza-internet-blackout-israel/)

The Guardian reports:

[Aipac: the pro-Israel group planning to spend millions in US elections](https://www.theguardian.com/world/2024/apr/22/aipac-pro-israel-lobby-group-us-elections)

**To undermine U.S. democracy like they always have. These fucks are up there with the NRA and Big Oil.**

Fortune reports:

[Some ex-TikTok employees say the social media service worked closely with its China-based parent despite claims of independence](https://fortune.com/2024/04/15/tiktok-china-data-sharing-bytedance-project-texas/)

DarkReading reports:

[North Korea APT Triumvirate Spied on South Korean Defense Industry For Years](https://www.darkreading.com/cyberattacks-data-breaches/north-korea-apt-triumvirate-spied-on-south-korean-defense-industry-for-years)

From the former director for civic integrity at Twitter:

[Why I'm Leaving Twitter: A Reflection on Elon Musk's Takeover and Anti-Democratic Values](https://mem.ai/p/e83QTrTPntGEmmZYQUEc)

404 Media reports:

[Instagram's Nudify Ads](https://www.404media.co/email/d2bebba9-5808-44fc-8352-d93d1791a5ff/)

[AI Is Poisoning Reddit](https://www.404media.co/email/a68bab92-e45e-4b30-b368-96ab547dd896/)

TechCrunch reports: 

[India’s election overshadowed by the rise of online misinformation](https://techcrunch.com/2024/04/20/india-election-tough-fight-against-online-misinformation/)

In a follow up to an article we shared last week The Markup reports:

[Online Censorship in Schools Leaves Teachers in the Lurch, Too](https://themarkup.org/digital-book-banning/2024/04/23/online-censorship-in-schools-leaves-teachers-in-the-lurch-too)

Cory Doctorow writes:

[Paying for it doesn't make it a market](https://pluralistic.net/2024/04/22/kargo-kult-kaptialism/#dont-buy-it)

**Even when you pay for Big Tech, it's enshitified. And designed to fuck you over.**

### Cybersecurity/Privacy  
  
Bleeping Computer reports:

[GitHub comments abused to push malware via Microsoft repo URLs](https://www.bleepingcomputer.com/news/security/github-comments-abused-to-push-malware-via-microsoft-repo-urls/)

[GitLab affected by GitHub-style CDN flaw allowing malware hosting](https://www.bleepingcomputer.com/news/security/gitlab-affected-by-github-style-cdn-flaw-allowing-malware-hosting/)

Dark Reading reports on:

[Where Hackers Find Your Weak Spots](https://www.darkreading.com/vulnerabilities-threats/where-hackers-find-your-weak-spots)

[SolarWinds 2024: Where Do Cyber Disclosures Go From Here?](https://www.darkreading.com/cyberattacks-data-breaches/solarwinds-2024-where-do-cyber-disclosures-go-from-here)

TechCrunch has:

[US government says security flaw in Chirp Systems’ app lets anyone remotely control smart home locks](https://techcrunch.com/2024/04/22/cisa-chirp-systems-remotely-unlock-smart-locks/)

**Which is why you should have locks with manual codes or a physical key.**

[UnitedHealth says Change hackers stole health data on ‘substantial proportion of people in America’](https://techcrunch.com/2024/04/22/unitedhealth-change-healthcare-hackers-substantial-proportion-americans/)

The Hacker News reports: 

[CoralRaider Malware Campaign Exploits CDN Cache to Spread Info-Stealers](https://thehackernews.com/2024/04/coralraider-malware-campaign-exploits.html)
  
NGI Commons asks:

[Responding to XZ utils: Can a digital commons approach reinforce OSS security?](https://commons.ngi.eu/2024/04/24/responding-to-xz-utils-can-a-digital-commons-approach-reinforce-oss-security/) 


---  
  
### Fediverse  
  
The Fediverse Report has:  

[Last Week in Fediverse – ep 65](https://fediversereport.com/last-week-in-fediverse-ep-65/)

The Nexus of Privacy shares:

[Eight tips about consent for Fediverse developers](https://privacy.thenexus.today/consent-for-fediverse-developers/)

**Read this tech bros.**

We Distribute reports on:

[ActivityPods: Federated Solid Pods](https://wedistribute.org/2024/04/activitypods-federated-solid-pods/)

**This is important.**

[Decentered S1E8: WordPress-ActivityPub with Matthias Pfefferle](https://wedistribute.org/podcast/wordpress-matthias-pfefferle/)  

The Verge reports:

[Newsletter platform Ghost adopts ActivityPub to ‘bring back the open web’](https://www.theverge.com/2024/4/22/24137296/ghost-newsletter-activitypub-fediverse-support)

[Threads wants to let you wipe your old posts away](https://www.theverge.com/2024/4/24/24139568/threads-archive-hide-posts-test)  

Speaking of the Verge, Digiday reports:

[As TikTok ban threatens stability in social media ecosystem, some brands settle into the Fediverse](https://digiday.com/marketing/as-tiktok-ban-threatens-stability-in-social-media-ecosystem-some-brands-settle-into-the-fediverse/)
TechCrunch reports on:

[Why Meta is looking to the Fediverse as the future for social media](https://techcrunch.com/2024/04/25/why-meta-is-looking-to-the-fediverse-as-the-future-for-social-media/)

The New Stack has:

[One Login: Towards a Single Fediverse Identity on ActivityPub](https://thenewstack.io/one-login-towards-a-single-fediverse-identity-on-activitypub/)

**This would be awesome.**

Luca Hammer explores:

[Mastodon Advanced Search Guide and Operators](https://lucahammer.com/2024/04/25/mastodon-advanced-search-guide-and-operators)
  
The European Data Protection Supervisor reports:

[EDPS decentralised social media pilot: the end of a successful story](https://www.edps.europa.eu/press-publications/press-news/press-releases/2024/edps-decentralised-social-media-pilot-end-successful-story)  

**Hopefully, all the test users will migrate to other instances.**

The Dabbler advocates:

[The Slow Fedi Movement: Toward a Green, Independent, and Equitable Fediverse](https://thedabbler.patatas.ca/pages/slow-fedi.html)

Evan Boehs says:

[You Have Power: Making Truth Social Comply With The AGPL](https://boehs.org/node/truth-social)

Evan Prodromou has:

[Cross-server Interactions in ActivityPub](https://evanp.me/2024/04/22/cross-server-interactions-in-activitypub/)

**I am looking forward to getting his book if physical copies become available.**
  
[Bytedance: Add ActivityPub to Tiktok Notes](https://evanp.me/2024/04/19/bytedance-add-activitypub-to-tiktok-notes/ )

**Then we could all block it.**
  
### Other federated social media  
  
The Pragmatic Engineer shares a long article:

[Building Bluesky: a Distributed Social Network (Real-World Engineering Challenges)](https://newsletter.pragmaticengineer.com/p/bluesky)

TechCrunch reports:

[Bluesky backs a project that would let Mastodon apps, like Ivory, work with its network](https://techcrunch.com/2024/04/25/bluesky-backs-a-project-that-would-let-mastodon-apps-like-ivory-work-with-its-network/)

**Wow $800. Real generous there Bluesky.**

Blacksky is:

[Building the Black social layer for the decentralized web](https://www.blackskyweb.xyz/)

**$1000! Even more generous.** 🙃

---  
  
## CTAs (aka show us some free love)  
  
- That’s it for this week. Please share this communiqué.  
- Also, please [join our newsletter list for The Payload](https://newsletter.mobileatom.net/). Joining gets you each week's communiqué in your inbox (a day early).  
- Follow us [on Flipboard](https://flipboard.com/@mobileatom/symfony-for-the-devil-allupr6jz) or at [@symfonystation@drupal.community](https://drupal.community/@SymfonyStation) on Mastodon for daily coverage.  
- Do you like Reddit? Why? Instead, follow us [on kbin](https://kbin.social/u/symfonystation) for a better Fediverse and Symfony-based experience. We have a [Symfony Magazine](https://kbin.social/m/Symfony) and [Collection](https://kbin.social/c/SymfonyUniverse) there.  
  
Do you own or work for an organization that would be interested in our promotion opportunities? Or supporting our journalistic efforts? If so, please get in touch with us. We’re in our toddler stage, so it’s extra economical. 😉  
  
More importantly, if you are a Ukrainian company with coding-related products, we can offer free promotion on [our Support Ukraine page](https://symfonystation.mobileatom.net/Support-Ukraine). Or, if you know of one, get in touch.  
  
You can find a vast array of curated evergreen content on our [communiqués page](([https://symfonystation.mobileatom.net/communiques](https://symfonystation.mobileatom.net/communiques)).   
  
## Author  
  
![Reuben Walker headshot](https://symfonystation.mobileatom.net/sites/default/files/inline-images/Reuben-Walker-headshot.jpg)  
  
### Reuben Walker  
  
Founder
Symfony Station